PT-2024-21247 · Frentix Gmbh · Openolat Lms

Johannes Völpel + 1 · Published 2024-02-20 · Updated 2025-03-14 · CVE-2024-25973

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Frentix GmbH OpenOlat LMS (affected versions not specified)

Description The issue concerns multiple stored Cross-Site Scripting (XSS) vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Additionally, attackers with permissions to create or rename a catalog (sub-category) or create curriculums can enter unfiltered input in the name field, allowing them to execute stored JavaScript code with the permissions of the victim in the context of the user's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2024-25973

Affected Products

Openolat Lms

References · 9

• 🔥 https://r.sec-consult.com/openolat · Exploit
• 🔥 http://seclists.org/fulldisclosure/2024/Feb/23 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-25973 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25973 · Vendor Advisory
• https://t.me/cvenotify/111101 · Telegram Post
• https://twitter.com/CVEnew/status/1759855806881874063 · Twitter Post
• https://t.me/cvenotify/114793 · Telegram Post
• https://t.me/cvenotify/72084 · Telegram Post
• https://t.me/cvenotify/71944 · Telegram Post