CVE-2026-32932
Full vulnerability record from the local CVENow database.
Description
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks the id_session parameter to the attacker's server. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.
Severity
MEDIUM
CVSS score
6.1
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-04-10 18:16:42.590000
Last modified
2026-10-26 22:10:00.163000
View original CVE JSON
{
"id": "CVE-2026-32932",
"sourceIdentifier": "[email protected]",
"published": "2026-04-10T18:16:42.590",
"lastModified": "2026-10-26T22:10:00.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks the id_session parameter to the attacker's server. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3."
},
{
"lang": "es",
"value": "Chamilo LMS es un sistema de gestión del aprendizaje. Antes de 1.11.38 y 2.0.0-RC.3, una vulnerabilidad de redirección abierta en la página de edición de cursos de sesión permite a un atacante redirigir a un administrador autenticado a una URL externa arbitraria después de guardar los cambios de asignación de entrenador. La redirección también filtra el parámetro id_session al servidor del atacante. Esta vulnerabilidad está corregida en 1.11.38 y 2.0.0-RC.3."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "chamilo",
"product": "chamilo-lms",
"versions": [
{
"version": "< 1.11.38",
"status": "affected"
},
{
"version": ">= 2.0.0-alpha.1, < 2.0.0-RC.3",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-13T12:52:22.657541Z",
"id": "CVE-2026-32932",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-601"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.11.38",
"matchCriteriaId": "A4D0C5D2-6FA0-4532-8E3D-4EA111A50621"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha1:*:*:*:*:*:*",
"matchCriteriaId": "4AF7661F-C1F7-4CAB-BBDF-FC5BF7F5BEB8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha2:*:*:*:*:*:*",
"matchCriteriaId": "FE56AF71-9D53-42C6-980D-09E1C418ED87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha3:*:*:*:*:*:*",
"matchCriteriaId": "01195674-9E1A-4C07-B7D3-0F0CC2E6511B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha4:*:*:*:*:*:*",
"matchCriteriaId": "BAE63449-5A56-4302-A4BF-F3D19FC96A80"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha5:*:*:*:*:*:*",
"matchCriteriaId": "A84A06F9-5AB7-4703-8153-33AC68882B95"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "B91302A3-53DE-4ED0-BAAB-FE9DA03F8242"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "46008D4A-96F7-4E04-8256-E115AAAE3383"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:beta3:*:*:*:*:*:*",
"matchCriteriaId": "6E2BCAFF-D44B-4E67-998A-DF855E27606B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "D2E7D018-E4C2-45F5-8D9A-DAC947173607"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "DAF96697-6B6D-459D-9510-E5CEEDC2859B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/chamilo/chamilo-lms/commit/b005b3d3e76cf6eafc03e15ac445ceff089551c0",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/chamilo/chamilo-lms/commit/fbd8d7eb37d05ec974293f05b6ffaaf9102ebd2b",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-q2cp-3qj3-wx8q",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}