Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks for the "category_id" parameter which allows users to update the category of any user by replacing the "category_id" parameter. This issue has been patched in version 1.11.34.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-59544 Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks for t… https://www.cve.org/CVERecord?id=CVE-2025-59544
Post summary
The CVE-2025-59544 disclosure identifies a missing authorization check in Chamilo’s category update feature, but it does not provide PoC, exploit code, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-59544 - Chamilo: Unauthorized access to update category of any user Intel Report: https://ift.tt/abSVUCl
Post summary
The post announces CVE-2025-59544, a Chamilo privilege‑escalation vulnerability that lets users modify any category, but it does not provide a PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chamilo | chamilo_lms | - | - | - |