CVE-2026-31939

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31939
Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is concatenated directly into filesystem path without canonicalization or traversal checks. This vulnerability is fixed in 1.11.38.

8.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/chamilo/chamilo-lms/commit/4dddcc19d36119da27b7c49eb84a035800abae78 Patch
https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.38 Release Notes
https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx Vendor Advisory
https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*
History

17 Apr 2026, 21:23

Type Values Removed Values Added
References () https://github.com/chamilo/chamilo-lms/commit/4dddcc19d36119da27b7c49eb84a035800abae78 - () https://github.com/chamilo/chamilo-lms/commit/4dddcc19d36119da27b7c49eb84a035800abae78 - Patch
References () https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.38 - () https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.38 - Release Notes
References () https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx - () https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx - Vendor Advisory
First Time Chamilo chamilo Lms
Chamilo
CPE cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*

13 Apr 2026, 16:16

Type Values Removed Values Added
References () https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx - () https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8q8c-v75x-q2hx -

10 Apr 2026, 18:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-10 18:16

Updated : 2026-04-17 21:23

NVD link : CVE-2026-31939

Mitre link : CVE-2026-31939

CVE.ORG link : CVE-2026-31939

JSON object : View

Products Affected

chamilo

  • chamilo_lms
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-73

External Control of File Name or Path