CVE-2024-50337 — Chamilo: Potential unauthenticated blind SSRF via openid function
Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthentic…
Published: 2026-03-02 · CVSS: 5.3 · CVSS 3.1
Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticated blind SSRF. This issue has been patched in version 1.11.28.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7