CVE-2025-50187 - Vulnerability Analysis

Overview

Chamilo < 1.11.28 contains a remote code execution caused by unfiltered evaluation of SOAP request parameters, letting remote attackers execute arbitrary code, exploit requires sending crafted SOAP requests.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially taking full control of the system.

Mitigation

Update to version 1.11.28 or later.

References

• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-356v-7xg2-3678
• https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.28

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner