Chamilo LMS Open Redirect Vulnerability in Session Course Edit Page

An open redirect vulnerability has been identified in Chamilo LMS versions prior to 1.11.38 and 2.0.0-RC.3. The issue resides in the session course edit page, where the application fails to properly validate the 'page' parameter. This flaw allows an attacker to redirect an authenticated administrator to an arbitrary external URL after changes are made to coach assignments. Additionally, the vulnerability leaks the 'id_session' parameter to the attacker's server.

Impact

Exploitation of this vulnerability would lead to an open redirect, causing an admin user to be sent to a malicious external site. This could be used for phishing attacks, especially if the redirected URL is made to look like a legitimate Chamilo login page.

Remediation

Users can upgrade to Chamilo LMS versions 1.11.38 or 2.0.0-RC.3 to address this vulnerability.