Openolat vulnerabilities
Products
- Openolat 7
Newest
- frentix openolat OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution 8.8 High
- frentix openolat OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow 9.8 Critical
- frentix openolat XML external entity (XXE) injection in OpenOLAT 4.6 Medium
- frentix openolat Path Traversal in some REST methods leading to file upload to arbitrary places 8.1 High
- frentix openolat Path Traversal in Folder Component Leading to Local File Inclusion 7.7 High
- frentix openolat Unsafe Deserialization of User Data Using XStream 8.8 High
- frentix openolat Path Traversal in Archive Handling Leading to Code Execution 8.1 High