Vulnerabilities in OpenOLAT
7 resultsCVE-2021-39180HIGHPath Traversal in Archive Handling Leading to Code ExecutionEPSS 2.4%CVE-2021-39181HIGHUnsafe Deserialization of User Data Using XStreamEPSS 1.8%CVE-2021-41242HIGHPath Traversal in some REST methods leading to file upload to arbitrary placesEPSS 1.4%CVE-2021-41152HIGHPath Traversal in Folder Component Leading to Local File InclusionEPSS 1.2%CVE-2024-28198MEDIUMXML external entity (XXE) injection in OpenOLATEPSS 0.4%CVE-2026-28228HIGHOpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code ExecutionEPSS 0.4%CVE-2026-31946CRITICALOpenOLAT: Authentication bypass via forged JWT in OIDC implicit flowEPSS 0.2%