Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-33702

1 brief RSS
medium advisory

Chamilo LMS IDOR Vulnerability Allows Learning Path Manipulation

Chamilo LMS before versions 1.11.38 and 2.0.0-RC.3 is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability, allowing authenticated users to modify the learning path progress of other users by manipulating the 'uid' parameter in the lp_ajax_save_item.php endpoint.

chamilo lms idor cve-2026-33702
2r 1t 1c