CVE-2021-41242

OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create directory structures and write files anywhere on the target system. The attack could be used to write files anywhere in the web root folder or outside, depending on the configuration of the system and the properly configured permission of the application server user. The attack requires an OpenOlat user account, an enabled REST API and the rights on a business object to call the vulnerable REST calls. The problem is fixed in version 15.5.12 and 16.0.5. There is a workaround available. The vulnerability requires the REST module to be enabled. Disabling the REST module or limiting the REST module via some firewall or web-server access rules to be accessed only be trusted systems will mitigate the risk.

• CWE-23
• CWE-22

• https://github.com/OpenOLAT/OpenOLAT/commit/336d5ce80681be61a0bbf4f73d2af5d1ff67e93aPatch, Third Party Advisory
• https://github.com/OpenOLAT/OpenOLAT/commit/c450df7d7ffe6afde39ebca6da9136f1caa16ec4Patch, Third Party Advisory
• https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-62hv-rfp4-hmrmThird Party Advisory
• https://jira.openolat.org/browse/OO-5819Permissions Required, Vendor Advisory
• https://github.com/OpenOLAT/OpenOLAT/commit/336d5ce80681be61a0bbf4f73d2af5d1ff67e93aPatch, Third Party Advisory
• https://github.com/OpenOLAT/OpenOLAT/commit/c450df7d7ffe6afde39ebca6da9136f1caa16ec4Patch, Third Party Advisory
• https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-62hv-rfp4-hmrmThird Party Advisory
• https://jira.openolat.org/browse/OO-5819Permissions Required, Vendor Advisory

Published

Dec 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41233Nextcloud text is a collaborative document editing using Mar…5.3
• CVE-2021-41236OroPlatform is a PHP Business Application Platform. In affec…4.8
• CVE-2021-41238Hangfire is an open source system to perform background job …7.5
• CVE-2021-41239Nextcloud server is a self hosted system designed to provide…5.3
• CVE-2021-4124janus-gateway is vulnerable to Improper Neutralization of In…6.1
• CVE-2021-41241Nextcloud server is a self hosted system designed to provide…4.3
• CVE-2021-41243There is a Potential Zip Slip Vulnerability and OS Command I…8.8
• CVE-2021-41244Grafana is an open-source platform for monitoring and observ…7.2
• CVE-2021-41245Combodo iTop is a web based IT Service Management tool. In v…8.1
• CVE-2021-41246Express OpenID Connect is express JS middleware implementing…8.8
• CVE-2021-41247JupyterHub is an open source multi-user server for Jupyter n…7.5
• CVE-2021-41248GraphiQL is the reference implementation of this monorepo, G…4.7