CVE-2026-31940

Published: Apr 10, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, in main/lp/aicc_hacp.php, user-controlled request parameters are directly used to set the PHP session ID before loading global bootstrap. This leads to session fixation. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.

Affected (11)

Products: Chamilo: Chamilo Lms

Chamilo

1 product

Chamilo Lms

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Chamilo Chamilo Lms	Before 1.11.38
Chamilo Chamilo Lms	Version 2.0.0 alpha1
Chamilo Chamilo Lms	Version 2.0.0 alpha2
Chamilo Chamilo Lms	Version 2.0.0 alpha3
Chamilo Chamilo Lms	Version 2.0.0 alpha4
Chamilo Chamilo Lms	Version 2.0.0 alpha5
Chamilo Chamilo Lms	Version 2.0.0 beta1
Chamilo Chamilo Lms	Version 2.0.0 beta2
Chamilo Chamilo Lms	Version 2.0.0 beta3
Chamilo Chamilo Lms	Version 2.0.0 rc1
Chamilo Chamilo Lms	Version 2.0.0 rc2

Related CWEs

CWE-384

Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

References (3)

https://github.com/chamilo/chamilo-lms/commit/ce0192c62e48c9d9474d915c541b3274844afbf9

Source: security-advisories@github.com

Patch

https://github.com/chamilo/chamilo-lms/commit/e337b7cc74a0276a0b4f91f9282204d20cac1869

Source: security-advisories@github.com

Patch

https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-4gp7-cfjh-77gv

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.