QwikSec

Security Database

CVE

CWE

Training

CVE-2025-52998

Published: Mar 2, 2026

Modified: Mar 2, 2026

PUBLISHED

Description

Chamilo is a learning management system. Prior to version 1.11.30, in the application, deserialization of data is performed, the data can be spoofed. An attacker can create objects of arbitrary classes, as well as fully control their properties, and thus modify the logic of the web application's operation. This issue has been patched in version 1.11.30.

Vendor	Product	Versions
chamilo	chamilo-lms	affected `< 1.11.30`

Weaknesses (CWE)

References

https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-6mwg-2mw5-rx5v

x_refsource_CONFIRM

https://github.com/chamilo/chamilo-lms/commit/ba7e15d8cfefcd451de939e98d461b17e72eb627

x_refsource_MISC

https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.30

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.