Vulnerabilities > CVE-2021-39181 - Unspecified vulnerability in Frentix Openolat

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

frentix

NVD

Published: 2021-09-01

Updated: 2024-11-21

Summary

OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instantiated, including spring AOP bean factories. This can be used to execute code arbitrary code by the attacker. The attack requires an OpenOlat user account with the authoring role. It can not be exploited by unregistered users. The problem is fixed in versions 15.3.18, 15.5.3, and 16.0.0. There are no known workarounds aside from upgrading.

Vulnerable Configurations

Part	Description	Count
Application	Frentix Frentix Openolat - Frentix Openolat 7.1.0 Frentix Openolat 8.0 Frentix Openolat 8.0.2 Frentix Openolat 8.0.3 Frentix Openolat 8.1 Frentix Openolat 8.1.1 Frentix Openolat 8.1.2 Frentix Openolat 8.1.3 Frentix Openolat 8.1.4 Frentix Openolat 8.2.0 Frentix Openolat 8.2.1 Frentix Openolat 8.3.0 Frentix Openolat 8.3.1 Frentix Openolat 8.3.2 Frentix Openolat 8.3.3 Frentix Openolat 8.3.4 Frentix Openolat 8.3.5 Frentix Openolat 8.4.0 Frentix Openolat 8.4.1 Frentix Openolat 8.4.2 Frentix Openolat 8.4.3 Frentix Openolat 8.4.4 Frentix Openolat 9.0.0 Frentix Openolat 9.0.1 Frentix Openolat 9.0.2 Frentix Openolat 9.0.3 Frentix Openolat 9.0.4 Frentix Openolat 9.0.5 Frentix Openolat 9.0.6 Frentix Openolat 9.1.0 Frentix Openolat 9.1.1 Frentix Openolat 9.1.2 Frentix Openolat 9.2.0 Frentix Openolat 9.2.1 Frentix Openolat 9.3.0 Frentix Openolat 9.3.1 Frentix Openolat 9.3.2 Frentix Openolat 9.3.3 Frentix Openolat 9.3.4 Frentix Openolat 9.3.5 Frentix Openolat 9.4.0 Frentix Openolat 9.4.1 Frentix Openolat 9.4.2 Frentix Openolat 9.4.3 Frentix Openolat 9.4.4 Frentix Openolat 10.0.0 Frentix Openolat 10.0.1 Frentix Openolat 10.0.2 Frentix Openolat 10.0.3 Frentix Openolat 10.0.4 Frentix Openolat 10.0.5 Frentix Openolat 10.0.6 Frentix Openolat 10.0.7 Frentix Openolat 10.0.8 Frentix Openolat 10.0.9 Frentix Openolat 10.1.0 Frentix Openolat 10.1.1 Frentix Openolat 10.1.2 Frentix Openolat 10.1.3 Frentix Openolat 10.2.0 Frentix Openolat 10.2.1 Frentix Openolat 10.2.2 Frentix Openolat 10.2.3 Frentix Openolat 10.2.4 Frentix Openolat 10.2.5 Frentix Openolat 10.3.0 Frentix Openolat 10.3.1 Frentix Openolat 10.3.2 Frentix Openolat 10.3.3 Frentix Openolat 10.3.4 Frentix Openolat 10.3.5 Frentix Openolat 10.3.6 Frentix Openolat 10.3.7 Frentix Openolat 10.3.8 Frentix Openolat 10.4.0 Frentix Openolat 10.4.1 Frentix Openolat 10.4.2 Frentix Openolat 10.4.3 Frentix Openolat 10.4.4 Frentix Openolat 10.4.5 Frentix Openolat 10.4.6 Frentix Openolat 10.4.7 Frentix Openolat 10.4.8 Frentix Openolat 10.4.9 Frentix Openolat 10.4.10 Frentix Openolat 10.4.11 Frentix Openolat 10.5.0 Frentix Openolat 10.5.1 Frentix Openolat 10.5.2 Frentix Openolat 10.5.3 Frentix Openolat 10.5.4 Frentix Openolat 10.5.5 Frentix Openolat 10.5.6 Frentix Openolat 10.5.7 Frentix Openolat 10.5.8 Frentix Openolat 10.5.9 Frentix Openolat 11.0.0 Frentix Openolat 11.0.1 Frentix Openolat 11.0.2 Frentix Openolat 11.0.3 Frentix Openolat 11.0.4 Frentix Openolat 11.0.5 Frentix Openolat 11.0.6 Frentix Openolat 11.0.7 Frentix Openolat 11.0.8 Frentix Openolat 11.0.9 Frentix Openolat 11.0.10 Frentix Openolat 11.1.0 Frentix Openolat 11.1.1 Frentix Openolat 11.1.2 Frentix Openolat 11.2.0 Frentix Openolat 11.2.1 Frentix Openolat 11.2.2 Frentix Openolat 11.2.3 Frentix Openolat 11.2.4 Frentix Openolat 11.3.0 Frentix Openolat 11.3.1 Frentix Openolat 11.3.2 Frentix Openolat 11.3.3 Frentix Openolat 11.4.0 Frentix Openolat 11.4.1 Frentix Openolat 11.4.2 Frentix Openolat 11.4.3 Frentix Openolat 11.5.0 Frentix Openolat 11.5.1 Frentix Openolat 11.5.2 Frentix Openolat 11.5.3 Frentix Openolat 11.5.4 Frentix Openolat 11.5.5 Frentix Openolat 12.0.0 Frentix Openolat 12.0.1 Frentix Openolat 12.0.2 Frentix Openolat 12.1.0 Frentix Openolat 12.1.1 Frentix Openolat 12.1.2 Frentix Openolat 12.1.3 Frentix Openolat 12.1.4 Frentix Openolat 12.1.5 Frentix Openolat 12.2.0 Frentix Openolat 12.2.1 Frentix Openolat 12.2.2 Frentix Openolat 12.2.3 Frentix Openolat 12.2.4 Frentix Openolat 12.2.5 Frentix Openolat 12.2.6 Frentix Openolat 12.2.7 Frentix Openolat 12.2.8 Frentix Openolat 12.3.0 Frentix Openolat 12.3.1 Frentix Openolat 12.3.2 Frentix Openolat 12.3.3 Frentix Openolat 12.4.0 Frentix Openolat 12.4.1 Frentix Openolat 12.4.2 Frentix Openolat 12.4.3 Frentix Openolat 12.5.0 Frentix Openolat 12.5.1 Frentix Openolat 12.5.2 Frentix Openolat 12.5.3 Frentix Openolat 12.5.4 Frentix Openolat 12.5.5 Frentix Openolat 12.5.6 Frentix Openolat 12.5.7 Frentix Openolat 12.5.8 Frentix Openolat 12.5.9 Frentix Openolat 12.5.10 Frentix Openolat 12.5.11 Frentix Openolat 12.5.12 Frentix Openolat 12.5.13 Frentix Openolat 12.5.14 Frentix Openolat 12.5.15 Frentix Openolat 12.5.16 Frentix Openolat 12.5.17 Frentix Openolat 12.5.18 Frentix Openolat 12.5.19 Frentix Openolat 12.5.20 Frentix Openolat 12.5.21 Frentix Openolat 12.5.22 Frentix Openolat 12.5.23 Frentix Openolat 12.5.24 Frentix Openolat 12.5.25 Frentix Openolat 12.5.26 Frentix Openolat 13.0.0 Frentix Openolat 13.0.1 Frentix Openolat 13.0.2 Frentix Openolat 13.0.3 Frentix Openolat 13.1.0 Frentix Openolat 13.1.1 Frentix Openolat 13.1.2 Frentix Openolat 13.2.0 Frentix Openolat 13.2.1 Frentix Openolat 13.2.2 Frentix Openolat 13.2.3 Frentix Openolat 13.2.4 Frentix Openolat 13.2.5 Frentix Openolat 13.2.6 Frentix Openolat 13.2.7 Frentix Openolat 13.2.8 Frentix Openolat 14.0.0 Frentix Openolat 14.0.2 Frentix Openolat 14.0.3 Frentix Openolat 14.0.4 Frentix Openolat 14.01 Frentix Openolat 14.1.0 Frentix Openolat 14.1.1 Frentix Openolat 14.1.2 Frentix Openolat 14.1.3 Frentix Openolat 14.1.4 Frentix Openolat 14.1.5 Frentix Openolat 14.1.6 Frentix Openolat 14.1.7 Frentix Openolat 14.2.0 Frentix Openolat 14.2.1 Frentix Openolat 14.2.2 Frentix Openolat 14.2.3 Frentix Openolat 14.2.4 Frentix Openolat 14.2.5 Frentix Openolat 14.2.6 Frentix Openolat 14.2.7 Frentix Openolat 14.2.8 Frentix Openolat 14.2.9 Frentix Openolat 14.2.10 Frentix Openolat 14.2.11 Frentix Openolat 14.2.12 Frentix Openolat 14.2.13 Frentix Openolat 14.2.14 Frentix Openolat 14.2.15 Frentix Openolat 14.2.16 Frentix Openolat 14.2.17 Frentix Openolat 14.2.18 Frentix Openolat 15.0.0 Frentix Openolat 15.0.1 Frentix Openolat 15.0.2 Frentix Openolat 15.0.3 Frentix Openolat 15.0.4 Frentix Openolat 15.0.5 Frentix Openolat 15.0.6 Frentix Openolat 15.1.0 Frentix Openolat 15.1.1 Frentix Openolat 15.1.2 Frentix Openolat 15.1.3 Frentix Openolat 15.1.4 Frentix Openolat 15.2.0 Frentix Openolat 15.2.1 Frentix Openolat 15.2.2 Frentix Openolat 15.2.3 Frentix Openolat 15.2.4 Frentix Openolat 15.2.5 Frentix Openolat 15.2.6 Frentix Openolat 15.2.7 Frentix Openolat 15.2.8 Frentix Openolat 15.2.9 Frentix Openolat 15.2.10 Frentix Openolat 15.2.11 Frentix Openolat 15.2.12 Frentix Openolat 15.2.13 Frentix Openolat 15.3.0 Frentix Openolat 15.3.1 Frentix Openolat 15.3.2 Frentix Openolat 15.3.3 Frentix Openolat 15.3.4 Frentix Openolat 15.3.5 Frentix Openolat 15.3.6 Frentix Openolat 15.3.7 Frentix Openolat 15.3.8 Frentix Openolat 15.3.9 Frentix Openolat 15.3.10 Frentix Openolat 15.3.11 Frentix Openolat 15.3.12 Frentix Openolat 15.3.13 Frentix Openolat 15.3.14 Frentix Openolat 15.3.15 Frentix Openolat 15.3.16 Frentix Openolat 15.3.17 Frentix Openolat 15.5.0 Frentix Openolat 15.5.1 Frentix Openolat 15.5.2	299

Summary

Vulnerable Configurations

References