PT-2021-23132 · Openolat · Openolat

Gnaegi · Published 2021-10-18 · Updated 2021-10-22 · CVE-2021-41152

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenOlat versions prior to 15.5.8 OpenOlat versions prior to 16.0.1

Description OpenOlat is a web-based e-learning platform. In affected versions, an attacker can modify the path of a requested file download in the folder component to point to anywhere on the target system by manipulating the HTTP request. This could allow reading of any file accessible in the web root folder or outside, depending on the system configuration and application server user permissions. The attack requires an OpenOlat user account or the enabled guest user feature, along with the usage of the folder component in a course. It only allows reading of files, not writing, and the attacker must know the exact path of the file.

Recommendations For versions prior to 15.5.8, upgrade to version 15.5.8 or later. For versions prior to 16.0.1, upgrade to version 16.0.1 or later. As a general recommendation, consider upgrading to version 16.0.x to ensure the issue is resolved. At the moment, there are no known workarounds to fix this problem, an upgrade is necessary.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2021-41152

GHSA-M8J5-837G-2P3F

Affected Products

Openolat

References · 6

• https://github.com/OpenOLAT/OpenOLAT/commit/418bb509ffcb0e25ab4390563c6c47f0458583eb · Patch
• https://osv.dev/vulnerability/CVE-2021-41152 · Vendor Advisory
• https://jira.openolat.org/browse/OO-5696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41152 · Security Note
• https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-m8j5-837g-2p3f · Note
• https://t.me/cibsecurity/30735 · Telegram Post