PT-2021-23207 · Openolat · Openolat

Gnaegi · Published 2021-12-10 · Updated 2022-08-09 · CVE-2021-41242

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenOlat versions prior to 15.5.12 and 16.0.5

Description A path traversal issue exists in OpenOlat, allowing an attacker to create directory structures and write files anywhere on the target system by providing a filename with a relative path as a parameter in some REST methods. This could be used to write files in the web root folder or outside, depending on system configuration and application server user permissions. The attack requires an OpenOlat user account, an enabled REST API, and rights to call vulnerable REST calls.

Recommendations For versions prior to 15.5.12, update to version 15.5.12 or later. For versions prior to 16.0.5, update to version 16.0.5 or later. As a temporary workaround, consider disabling the REST module or limiting its access via firewall or web-server rules to only trusted systems.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2021-41242

GHSA-62HV-RFP4-HMRM

Affected Products

Openolat

References · 8

• https://github.com/OpenOLAT/OpenOLAT/commit/336d5ce80681be61a0bbf4f73d2af5d1ff67e93a · Patch
• https://github.com/OpenOLAT/OpenOLAT/commit/c450df7d7ffe6afde39ebca6da9136f1caa16ec4 · Patch
• https://osv.dev/vulnerability/CVE-2021-41242 · Vendor Advisory
• https://jira.openolat.org/browse/OO-5819 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41242 · Security Note
• https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-62hv-rfp4-hmrm · Note
• https://t.me/cvenotify/24543 · Telegram Post
• https://t.me/cibsecurity/33767 · Telegram Post