CVE-2022-42029: Chamilo

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.

Affected products

• Chamilo Chamilo: version 1.11.16 only

Published 2022-10-17. Last modified 2026-06-17.