Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Stored Cross-Site Scripting (XSS) within the Media Center
Vulnerability Description
The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
OpenOLAT 安全漏洞
Vulnerability Description
OpenOLAT是一个基于网络的电子学习平台，用于教学、学习、评估和交流，一个 LMS，一个学习管理系统。 OpenOLAT 存在安全漏洞，该漏洞源于允许在媒体中心内上传文件，无需任何其他权限。
CVSS Information
N/A
Vulnerability Type
N/A