CVE-2026-34370

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the notebook module contains an Insecure Direct Object Reference (IDOR) vulnerability that allows any authenticated student to read the private course notes of any other user on the platform by manipulating the notebook_id parameter in the editnote action. The application fetches the note content using only the supplied integer ID without verifying that the requesting user owns the note, and the full title and HTML body are rendered in the edit form and returned to the attacker's browser. While ownership checks exist in the write paths (updateNote() and delete_note()), they are entirely absent from the read path (get_note_information()). This issue has been fixed in version 2.0.0-RC.3.

• CWE-285
• CWE-639

• https://github.com/chamilo/chamilo-lms/releases/tag/v2.0.0-RC.3Product, Release Notes
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-fm35-2hvw-564qVendor Advisory

Published

Apr 14, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34365InvoiceShelf is an open-source web & mobile app that helps t…8.1
• CVE-2026-34366InvoiceShelf is an open-source web & mobile app that helps t…8.1
• CVE-2026-34367InvoiceShelf is an open-source web & mobile app that helps t…8.7
• CVE-2026-34368WWBN AVideo is an open source video platform. In versions up…5.3
• CVE-2026-34369WWBN AVideo is an open source video platform. In versions up…5.3
• CVE-2026-3437An improper restriction of operations within the bounds of a…7.8
• CVE-2026-34371LibreChat is a ChatGPT clone with additional features. Prior…6.3
• CVE-2026-34372Sulu is an open-source PHP content management system based o…2.7
• CVE-2026-34373Parse Server is an open source backend that can be deployed …8.8
• CVE-2026-34374WWBN AVideo is an open source video platform. In versions up…9.1
• CVE-2026-34375WWBN AVideo is an open source video platform. In versions up…8.2
• CVE-2026-34376PdfDing is a selfhosted PDF manager, viewer and editor offer…7.5