openolat Latest Vulnerabilities

Latest vulnerabilities published by openolat

JSON RSS CSV 🔔 Create Alert Trigger

30 March 2026

Velocity Directive Injection in OpenOlat E-Learning Platform by OpenOLAT
CVE-2026-28228
OpenolatOpenolat8.8HIGH
OpenOLAT OpenID Connect Implementation Vulnerability in E-learning Platform
CVE-2026-31946
OpenolatOpenolat9.8CRITICAL

11 March 2024

Security vulnerability in OpenOlat's Draw.io integration allows for arbitrary file reading
CVE-2024-28198
OpenolatOpenolat7.5HIGH

10 December 2021

Path Traversal in some REST methods leading to file upload to arbitrary places
CVE-2021-41242
OpenolatOpenolat8.1HIGH

18 October 2021

Path Traversal in Folder Component Leading to Local File Inclusion
CVE-2021-41152
OpenolatOpenolat7.7HIGH

1 September 2021

Unsafe Deserialization of User Data Using XStream
CVE-2021-39181
OpenolatOpenolat8.8HIGH

31 August 2021

Path Traversal in Archive Handling Leading to Code Execution
CVE-2021-39180
OpenolatOpenolat8.1HIGH