Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

chamilo/chamilo-lms

              master @ 4bc690a
            

587

Fixes

CVEs

CRITICAL

Peak severity

26.3%

Coverage

Highlights

Auth Bypass: 143 prior fixes. Scrutinize any change in this area.

src/CoreBundle/Security/Authorization/Voter/ResourceNodeVoter.php: most-fixed (15 issues). Treat as high-risk during review.

446 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass / Broken Access Control: The voter is the central authorization gate for resources; repeated fixes show it was permissive (unconditional grants, missing context checks, default rights fallback) and is a high-value target for variant attacks.

Auth Bypass: A large cluster of fixes replaced lax platform-wide roles (ROLE_USER/ROLE_TEACHER) with contextual course/session roles and object-level resource-node checks; any remaining entity or new endpoint using global roles is a likely bypass.

SQL Injection: Hundreds of fixes across procedural scripts show a systemic pattern of string-concatenated SQL with insufficient escaping; ORDER BY, LIMIT, and numeric parameters were common injection points.