UpHeron
All vulnerabilities

Servers and applications

CVE-2019-1000017

Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability in Tickets component that can result in an authenticated user can read all tickets available on the platform, due to lack of access controls. This attack appears to be exploitable via ticket_id=[ticket number]. This vulnerability appears to have been fixed in 1.11.x after commit…

Severity
Medium 6.5
Published
4 Feb 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1% in the next 30 daysHigher than 61% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Chamilo LMSServers and applications · cpe:a:chamilo:chamilo_lms
  • Every version up to 1.11.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-1000017
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-1000017