Vulnerabilities > CVE-2024-28198 - Unspecified vulnerability in Frentix Openolat

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

frentix

NVD

Published: 2024-03-11

Updated: 2025-02-26

Summary

OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and SSRF. The problem is fixed in version 18.1.6 and 18.2.2. It is advised to upgrade to the latest version of 18.1.x or 18.2.x. Users unable to upgrade may work around this issue by disabling the Draw.io module or the entire REST API which will secure the system.

Vulnerable Configurations

Part	Description	Count
Application	Frentix Frentix Openolat - Frentix Openolat 7.1.0 Frentix Openolat 8.0 Frentix Openolat 8.0.2 Frentix Openolat 8.0.3 Frentix Openolat 8.1 Frentix Openolat 8.1.1 Frentix Openolat 8.1.2 Frentix Openolat 8.1.3 Frentix Openolat 8.1.4 Frentix Openolat 8.2.0 Frentix Openolat 8.2.1 Frentix Openolat 8.3.0 Frentix Openolat 8.3.1 Frentix Openolat 8.3.2 Frentix Openolat 8.3.3 Frentix Openolat 8.3.4 Frentix Openolat 8.3.5 Frentix Openolat 8.4.0 Frentix Openolat 8.4.1 Frentix Openolat 8.4.2 Frentix Openolat 8.4.3 Frentix Openolat 8.4.4 Frentix Openolat 9.0.0 Frentix Openolat 9.0.1 Frentix Openolat 9.0.2 Frentix Openolat 9.0.3 Frentix Openolat 9.0.4 Frentix Openolat 9.0.5 Frentix Openolat 9.0.6 Frentix Openolat 9.1.0 Frentix Openolat 9.1.1 Frentix Openolat 9.1.2 Frentix Openolat 9.2.0 Frentix Openolat 9.2.1 Frentix Openolat 9.3.0 Frentix Openolat 9.3.1 Frentix Openolat 9.3.2 Frentix Openolat 9.3.3 Frentix Openolat 9.3.4 Frentix Openolat 9.3.5 Frentix Openolat 9.4.0 Frentix Openolat 9.4.1 Frentix Openolat 9.4.2 Frentix Openolat 9.4.3 Frentix Openolat 9.4.4 Frentix Openolat 10.0.0 Frentix Openolat 10.0.1 Frentix Openolat 10.0.2 Frentix Openolat 10.0.3 Frentix Openolat 10.0.4 Frentix Openolat 10.0.5 Frentix Openolat 10.0.6 Frentix Openolat 10.0.7 Frentix Openolat 10.0.8 Frentix Openolat 10.0.9 Frentix Openolat 10.1.0 Frentix Openolat 10.1.1 Frentix Openolat 10.1.2 Frentix Openolat 10.1.3 Frentix Openolat 10.2.0 Frentix Openolat 10.2.1 Frentix Openolat 10.2.2 Frentix Openolat 10.2.3 Frentix Openolat 10.2.4 Frentix Openolat 10.2.5 Frentix Openolat 10.3.0 Frentix Openolat 10.3.1 Frentix Openolat 10.3.2 Frentix Openolat 10.3.3 Frentix Openolat 10.3.4 Frentix Openolat 10.3.5 Frentix Openolat 10.3.6 Frentix Openolat 10.3.7 Frentix Openolat 10.3.8 Frentix Openolat 10.4.0 Frentix Openolat 10.4.1 Frentix Openolat 10.4.2 Frentix Openolat 10.4.3 Frentix Openolat 10.4.4 Frentix Openolat 10.4.5 Frentix Openolat 10.4.6 Frentix Openolat 10.4.7 Frentix Openolat 10.4.8 Frentix Openolat 10.4.9 Frentix Openolat 10.4.10 Frentix Openolat 10.4.11 Frentix Openolat 10.5.0 Frentix Openolat 10.5.1 Frentix Openolat 10.5.2 Frentix Openolat 10.5.3 Frentix Openolat 10.5.4 Frentix Openolat 10.5.5 Frentix Openolat 10.5.6 Frentix Openolat 10.5.7 Frentix Openolat 10.5.8 Frentix Openolat 10.5.9 Frentix Openolat 11.0.0 Frentix Openolat 11.0.1 Frentix Openolat 11.0.2 Frentix Openolat 11.0.3 Frentix Openolat 11.0.4 Frentix Openolat 11.0.5 Frentix Openolat 11.0.6 Frentix Openolat 11.0.7 Frentix Openolat 11.0.8 Frentix Openolat 11.0.9 Frentix Openolat 11.0.10 Frentix Openolat 11.1.0 Frentix Openolat 11.1.1 Frentix Openolat 11.1.2 Frentix Openolat 11.2.0 Frentix Openolat 11.2.1 Frentix Openolat 11.2.2 Frentix Openolat 11.2.3 Frentix Openolat 11.2.4 Frentix Openolat 11.3.0 Frentix Openolat 11.3.1 Frentix Openolat 11.3.2 Frentix Openolat 11.3.3 Frentix Openolat 11.4.0 Frentix Openolat 11.4.1 Frentix Openolat 11.4.2 Frentix Openolat 11.4.3 Frentix Openolat 11.5.0 Frentix Openolat 11.5.1 Frentix Openolat 11.5.2 Frentix Openolat 11.5.3 Frentix Openolat 11.5.4 Frentix Openolat 11.5.5 Frentix Openolat 12.0.0 Frentix Openolat 12.0.1 Frentix Openolat 12.0.2 Frentix Openolat 12.1.0 Frentix Openolat 12.1.1 Frentix Openolat 12.1.2 Frentix Openolat 12.1.3 Frentix Openolat 12.1.4 Frentix Openolat 12.1.5 Frentix Openolat 12.2.0 Frentix Openolat 12.2.1 Frentix Openolat 12.2.2 Frentix Openolat 12.2.3 Frentix Openolat 12.2.4 Frentix Openolat 12.2.5 Frentix Openolat 12.2.6 Frentix Openolat 12.2.7 Frentix Openolat 12.2.8 Frentix Openolat 12.3.0 Frentix Openolat 12.3.1 Frentix Openolat 12.3.2 Frentix Openolat 12.3.3 Frentix Openolat 12.4.0 Frentix Openolat 12.4.1 Frentix Openolat 12.4.2 Frentix Openolat 12.4.3 Frentix Openolat 12.5.0 Frentix Openolat 12.5.1 Frentix Openolat 12.5.2 Frentix Openolat 12.5.3 Frentix Openolat 12.5.4 Frentix Openolat 12.5.5 Frentix Openolat 12.5.6 Frentix Openolat 12.5.7 Frentix Openolat 12.5.8 Frentix Openolat 12.5.9 Frentix Openolat 12.5.10 Frentix Openolat 12.5.11 Frentix Openolat 12.5.12 Frentix Openolat 12.5.13 Frentix Openolat 12.5.14 Frentix Openolat 12.5.15 Frentix Openolat 12.5.16 Frentix Openolat 12.5.17 Frentix Openolat 12.5.18 Frentix Openolat 12.5.19 Frentix Openolat 12.5.20 Frentix Openolat 12.5.21 Frentix Openolat 12.5.22 Frentix Openolat 12.5.23 Frentix Openolat 12.5.24 Frentix Openolat 12.5.25 Frentix Openolat 12.5.26 Frentix Openolat 13.0.0 Frentix Openolat 13.0.1 Frentix Openolat 13.0.2 Frentix Openolat 13.0.3 Frentix Openolat 13.1.0 Frentix Openolat 13.1.1 Frentix Openolat 13.1.2 Frentix Openolat 13.2.0 Frentix Openolat 13.2.1 Frentix Openolat 13.2.2 Frentix Openolat 13.2.3 Frentix Openolat 13.2.4 Frentix Openolat 13.2.5 Frentix Openolat 13.2.6 Frentix Openolat 13.2.7 Frentix Openolat 13.2.8 Frentix Openolat 14.0.0 Frentix Openolat 14.0.2 Frentix Openolat 14.0.3 Frentix Openolat 14.0.4 Frentix Openolat 14.01 Frentix Openolat 14.1.0 Frentix Openolat 14.1.1 Frentix Openolat 14.1.2 Frentix Openolat 14.1.3 Frentix Openolat 14.1.4 Frentix Openolat 14.1.5 Frentix Openolat 14.1.6 Frentix Openolat 14.1.7 Frentix Openolat 14.2.0 Frentix Openolat 14.2.1 Frentix Openolat 14.2.2 Frentix Openolat 14.2.3 Frentix Openolat 14.2.4 Frentix Openolat 14.2.5 Frentix Openolat 14.2.6 Frentix Openolat 14.2.7 Frentix Openolat 14.2.8 Frentix Openolat 14.2.9 Frentix Openolat 14.2.10 Frentix Openolat 14.2.11 Frentix Openolat 14.2.12 Frentix Openolat 14.2.13 Frentix Openolat 14.2.14 Frentix Openolat 14.2.15 Frentix Openolat 14.2.16 Frentix Openolat 14.2.17 Frentix Openolat 14.2.18 Frentix Openolat 15.0.0 Frentix Openolat 15.0.1 Frentix Openolat 15.0.2 Frentix Openolat 15.0.3 Frentix Openolat 15.0.4 Frentix Openolat 15.0.5 Frentix Openolat 15.0.6 Frentix Openolat 15.1.0 Frentix Openolat 15.1.1 Frentix Openolat 15.1.2 Frentix Openolat 15.1.3 Frentix Openolat 15.1.4 Frentix Openolat 15.2.0 Frentix Openolat 15.2.1 Frentix Openolat 15.2.2 Frentix Openolat 15.2.3 Frentix Openolat 15.2.4 Frentix Openolat 15.2.5 Frentix Openolat 15.2.6 Frentix Openolat 15.2.7 Frentix Openolat 15.2.8 Frentix Openolat 15.2.9 Frentix Openolat 15.2.10 Frentix Openolat 15.2.11 Frentix Openolat 15.2.12 Frentix Openolat 15.2.13 Frentix Openolat 15.3.0 Frentix Openolat 15.3.1 Frentix Openolat 15.3.2 Frentix Openolat 15.3.3 Frentix Openolat 15.3.4 Frentix Openolat 15.3.5 Frentix Openolat 15.3.6 Frentix Openolat 15.3.7 Frentix Openolat 15.3.8 Frentix Openolat 15.3.9 Frentix Openolat 15.3.10 Frentix Openolat 15.3.11 Frentix Openolat 15.3.12 Frentix Openolat 15.3.13 Frentix Openolat 15.3.14 Frentix Openolat 15.3.15 Frentix Openolat 15.3.16 Frentix Openolat 15.3.17 Frentix Openolat 15.3.18 Frentix Openolat 15.4.0 Frentix Openolat 15.4.1 Frentix Openolat 15.4.2 Frentix Openolat 15.4.3 Frentix Openolat 15.4.4 Frentix Openolat 15.4.5 Frentix Openolat 15.4.6 Frentix Openolat 15.4.7 Frentix Openolat 15.4.8 Frentix Openolat 15.5.0 Frentix Openolat 15.5.1 Frentix Openolat 15.5.2 Frentix Openolat 15.5.3 Frentix Openolat 15.5.4 Frentix Openolat 15.5.5 Frentix Openolat 15.5.6 Frentix Openolat 15.5.7 Frentix Openolat 15.5.8 Frentix Openolat 15.5.9 Frentix Openolat 15.5.10 Frentix Openolat 15.5.11 Frentix Openolat 15.5.12 Frentix Openolat 15.5.13 Frentix Openolat 15.5.14 Frentix Openolat 16.0.0 Frentix Openolat 16.0.1 Frentix Openolat 16.0.2 Frentix Openolat 16.0.3 Frentix Openolat 16.0.4 Frentix Openolat 16.0.5 Frentix Openolat 16.0.6 Frentix Openolat 16.0.7 Frentix Openolat 16.0.8 Frentix Openolat 16.0.9 Frentix Openolat 16.1.0 Frentix Openolat 16.1.1 Frentix Openolat 16.1.2 Frentix Openolat 16.1.3 Frentix Openolat 16.1.4 Frentix Openolat 16.1.5 Frentix Openolat 16.1.6 Frentix Openolat 16.1.7 Frentix Openolat 16.1.8 Frentix Openolat 16.2.0 Frentix Openolat 16.2.1 Frentix Openolat 16.2.2 Frentix Openolat 16.2.3 Frentix Openolat 16.2.4 Frentix Openolat 16.2.5 Frentix Openolat 16.2.6 Frentix Openolat 16.2.7 Frentix Openolat 16.2.8 Frentix Openolat 16.2.9 Frentix Openolat 16.2.10 Frentix Openolat 16.2.11 Frentix Openolat 16.2.12 Frentix Openolat 16.2.13 Frentix Openolat 16.2.14 Frentix Openolat 16.2.15 Frentix Openolat 16.2.16 Frentix Openolat 16.2.17 Frentix Openolat 16.2.18 Frentix Openolat 17.0.0 Frentix Openolat 17.0.1 Frentix Openolat 17.0.2 Frentix Openolat 17.0.3 Frentix Openolat 17.0.4 Frentix Openolat 17.0.5 Frentix Openolat 17.0.6 Frentix Openolat 17.0.7 Frentix Openolat 17.0.8 Frentix Openolat 17.1.0 Frentix Openolat 17.1.1 Frentix Openolat 17.1.2 Frentix Openolat 17.1.3 Frentix Openolat 17.1.4 Frentix Openolat 17.1.5 Frentix Openolat 17.1.6 Frentix Openolat 17.1.7 Frentix Openolat 17.1.8 Frentix Openolat 17.1.9 Frentix Openolat 17.1.10 Frentix Openolat 17.2.0 Frentix Openolat 17.2.1 Frentix Openolat 17.2.2 Frentix Openolat 17.2.3 Frentix Openolat 17.2.4 Frentix Openolat 17.2.5 Frentix Openolat 17.2.7 Frentix Openolat 17.2.8 Frentix Openolat 17.2.9 Frentix Openolat 17.2.10 Frentix Openolat 17.2.11 Frentix Openolat 17.2.12 Frentix Openolat 17.2.13 Frentix Openolat 17.2.14 Frentix Openolat 17.2.15 Frentix Openolat 17.2.16 Frentix Openolat 17.2.17 Frentix Openolat 17.2.18 Frentix Openolat 17.2.19 Frentix Openolat 17.2.20 Frentix Openolat 18.0.0 Frentix Openolat 18.0.1 Frentix Openolat 18.0.2 Frentix Openolat 18.0.3 Frentix Openolat 18.0.4 Frentix Openolat 18.0.5 Frentix Openolat 18.0.6 Frentix Openolat 18.0.7 Frentix Openolat 18.1.0 Frentix Openolat 18.1.1 Frentix Openolat 18.1.2 Frentix Openolat 18.1.3 Frentix Openolat 18.1.4 Frentix Openolat 18.1.5	413

Summary

Vulnerable Configurations

References