CVE-2024-25974 Stored Cross-Site Scripting (XSS) within the Media Center

2024-02-2008:02:44

CWE-20

SEC-VLab

www.cve.org

openolat

lms

cve-2024-25974

stored xss

media center

frentix gmbh

openolat version 18.1.5

svg

javascript

file upload

vulnerability

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenOlat LMS",
    "vendor": "Frentix GmbH",
    "versions": [
      {
        "lessThanOrEqual": "18.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]