Frentix vulnerabilities

Products

• Openolat 9

Newest

• frentix openolat OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution CVE-2026-28228 8.8 HighMarch 30, 2026
• frentix openolat OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow CVE-2026-31946 9.8 CriticalMarch 30, 2026
• frentix openolat XML external entity (XXE) injection in OpenOLAT CVE-2024-28198 4.6 MediumMarch 11, 2024
• frentix openolat, frentix gmbh openolat lms +1 more Stored Cross-Site Scripting (XSS) within the Media Center CVE-2024-25974 5.4 MediumFebruary 20, 2024
• frentix openolat, frentix gmbh openolat lms +1 more Multiple Stored Cross-Site Scripting Vulnerabilities CVE-2024-25973 5.4 MediumFebruary 20, 2024
• frentix openolat Path Traversal in some REST methods leading to file upload to arbitrary places CVE-2021-41242 8.1 HighDecember 10, 2021
• frentix openolat Path Traversal in Folder Component Leading to Local File Inclusion CVE-2021-41152 7.7 HighOctober 18, 2021
• frentix openolat Unsafe Deserialization of User Data Using XStream CVE-2021-39181 8.8 HighSeptember 1, 2021
• frentix openolat Path Traversal in Archive Handling Leading to Code Execution CVE-2021-39180 8.1 HighAugust 31, 2021