Server-Side Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.CVE-2022-27426Chamilo · 0.8% likely

   CWE-918

2. An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafte…CVE-2023-34959Chamilo · CVSS 5.3 · 0.6% likely

   CWE-918

3. Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)CVE-2025-50199chamilo · CVSS 7.7 · 0.4% likely

   CWE-918

4. Chamilo: Potential unauthenticated blind SSRF via openid functionCVE-2024-50337chamilo · CVSS 5.3 · 0.4% likely

   CWE-918

5. Server-Side Request Forgery (SSRF) in Chamilo LMSCVE-2026-31941chamilo · CVSS 7.7 · 0.2% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.