Skip to contentFrentix Openolat vulnerabilities
- frentix openolatOpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code ExecutionCVE-2026-282288.8 High
- frentix openolatOpenOLAT: Authentication bypass via forged JWT in OIDC implicit flowCVE-2026-319469.8 Critical
- frentix openolatXML external entity (XXE) injection in OpenOLATCVE-2024-281984.6 Medium
- frentix openolat, frentix gmbh openolat lms +1 moreStored Cross-Site Scripting (XSS) within the Media CenterCVE-2024-259745.4 Medium
- frentix openolat, frentix gmbh openolat lms +1 moreMultiple Stored Cross-Site Scripting VulnerabilitiesCVE-2024-259735.4 Medium
- frentix openolatPath Traversal in some REST methods leading to file upload to arbitrary placesCVE-2021-412428.1 High
- frentix openolatPath Traversal in Folder Component Leading to Local File InclusionCVE-2021-411527.7 High
- frentix openolatUnsafe Deserialization of User Data Using XStreamCVE-2021-391818.8 High
- frentix openolatPath Traversal in Archive Handling Leading to Code ExecutionCVE-2021-391808.1 High