CVE-2024-25974
Last modified
CVE-2024-25974 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Frentix | Openolat | < 18.1.6 |
References
- http://seclists.org/fulldisclosure/2024/Feb/23Exploit, Mailing List, Third Party Advisory
- https://r.sec-consult.com/openolatExploit, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Feb/23Exploit, Mailing List, Third Party Advisory
- https://r.sec-consult.com/openolatExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-25974?
How severe is CVE-2024-25974?
How do I fix CVE-2024-25974?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-25969Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contain…5.5
- CVE-2024-2597Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
- CVE-2024-25970Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contain…6.5
- CVE-2024-25971Dell PowerProtect Data Manager, version 19.15, contains an X…6.5
- CVE-2024-25972Initialization of a resource with an insecure default vulner…8.3
- CVE-2024-25973The Frentix GmbH OpenOlat LMS is affected by multiple stored…5.4
- CVE-2024-25975The application implements an up- and downvote function whic…6.5
- CVE-2024-25976When LDAP authentication is activated in the configuration i…6.1
- CVE-2024-25977The application does not change the session token when using…7.3
- CVE-2024-25978Insufficient file size checks resulted in a denial of servic…7.5
- CVE-2024-25979The URL parameters accepted by forum search were not limited…5.3
- CVE-2024-2598Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
Are you affected by CVE-2024-25974?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST