Skip to content
OpenAdvisories

Vendor

OpenOLAT

7 known vulnerabilities.

OpenOLAT at a glance

Last 12 months
2
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities, 1 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202621
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

OpenOLAT 7
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 8.8
    CVE-2026-28228

    OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution

    OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. Prior to versions 19.1.31, 20.1.18, and 20.2.5, an authenticated user with the Author role can inject Velocity directives into a reminder email temp…

    OpenOLAT OpenOLAT
  • Critical 9.8
    CVE-2026-31946

    OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow

    OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. From version 10.5.4 to before version 20.2.5, OpenOLAT's OpenID Connect implicit flow implementation does not verify JWT signatures. The JSONWebToke…

    OpenOLAT OpenOLAT
  • Medium 4.6
    CVE-2024-28198

    XML external entity (XXE) injection in OpenOLAT

    OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and S…

    OpenOLAT OpenOLAT
  • High 8.1
    CVE-2021-41242

    Path Traversal in some REST methods leading to file upload to arbitrary places

    OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create dire…

    OpenOLAT OpenOLAT
  • High 7.7
    CVE-2021-41152

    Path Traversal in Folder Component Leading to Local File Inclusion

    OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the f…

    OpenOLAT OpenOLAT
  • High 8.8
    CVE-2021-39181

    Unsafe Deserialization of User Data Using XStream

    OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instantiated, including spring AOP bean factories. This can be used…

    OpenOLAT OpenOLAT
  • High 8.1
    CVE-2021-39180

    Path Traversal in Archive Handling Leading to Code Execution

    OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible to overwrite any file that is writable by the application ser…

    OpenOLAT OpenOLAT