CVE-2022-42029 - CVE House

Status published Unknown CVE-2022-42029

Chamilo 1.11.16 is affected by an authenticated local file inclusion...

0 CVSS

Vulnerability Description

Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-42029

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-95-2022-09-14-High-impact-Moderate-risk-Authenticated-Local-file-inclusion

More from chamilo

View All →

CVE-2025-66447

Chamilo LMS has validation-less redirect on login page

Unknown 0

CVE-2025-59544

Chamilo: Unauthorized access to update category of any user

Medium 6.9

CVE-2025-59543

Chamilo: Account Takeover via Stored XSS in Course Description

Critical 9.1

CVE-2025-59542

Chamilo: Account Takeover via Stored XSS in Course Learning Paths

Critical 9.1

CVE-2025-59541

Chamilo: CSRF Vulnerability in Project Deletion

High 8.1

Affected Vendor

chamilo

View all reports →

Affected Software

chamilo

Vulnerable Versions:

1.11.16

Timeline

Official Publish: October 17th, 2022

Last Modified: May 14th, 2025

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.