漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
Chamilo: CSRF Vulnerability in Project Deletion
漏洞信息
Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to delete projects inside a course without the victim’s consent. The issue arises because sensitive actions such as project deletion do not implement anti-CSRF protections (tokens) and GET based requests. As a result, an authenticated user (Trainer) can be tricked into executing this unwanted action by simply visiting a malicious page. This issue has been patched in version 1.11.34.
漏洞信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
漏洞
跨站请求伪造(CSRF)
漏洞
Chamilo 跨站请求伪造漏洞
漏洞信息
Chamilo是Chamilo开源的一个学习管理系统。 Chamilo 1.11.34之前版本存在跨站请求伪造漏洞，该漏洞源于项目删除等敏感操作缺少反CSRF保护，可能导致跨站请求伪造攻击，进而未经用户同意删除课程内项目。
漏洞信息
N/A
漏洞
N/A