PT-2024-21248 · Openolat · Openolat

Johannes Völpel + 1 · Published 2024-02-20 · Updated 2025-04-02 · CVE-2024-25974

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenOlat versions 18.1.5 and lower

Description The issue is a stored Cross-Site Scripting (XSS) vulnerability. It allows authenticated users to upload files within the Media Center without additional rights. Although file types are limited, an SVG image containing an XSS payload can be uploaded and shared with groups, including admins, who can then be attacked with the JavaScript payload.

Recommendations For OpenOlat versions 18.1.5 and lower, consider disabling the file upload feature in the Media Center until a patch is available. Restrict access to the Media Center to minimize the risk of exploitation. Avoid sharing files, especially SVG images, with groups of users until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2024-25974

Affected Products

Openolat

References · 8

• 🔥 https://r.sec-consult.com/openolat · Exploit
• 🔥 http://seclists.org/fulldisclosure/2024/Feb/23 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-25974 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25974 · Vendor Advisory
• https://t.me/cvenotify/71945 · Telegram Post
• https://t.me/cvenotify/72085 · Telegram Post
• https://twitter.com/CVEnew/status/1759859942817755472 · Twitter Post
• https://t.me/cvenotify/117447 · Telegram Post