CVE-2024-25974

2024-02-2008:15:07

CWE-20

SEC-VLab

web.nvd.nist.gov

3927

openolat

lms

security

vulnerability

xss

svg

file upload

nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

Percentile

9.0%

JSON

The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenOlat LMS",
    "vendor": "Frentix GmbH",
    "versions": [
      {
        "lessThanOrEqual": "18.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]