{"id":"CVE-2021-39181","details":"OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instantiated, including spring AOP bean factories. This can be used to execute code arbitrary code by the attacker. The attack requires an OpenOlat user account with the authoring role. It can not be exploited by unregistered users. The problem is fixed in versions 15.3.18, 15.5.3, and 16.0.0. There are no known workarounds aside from upgrading.","aliases":["GHSA-596v-3gwh-2m9w"],"modified":"2026-07-09T10:01:37.198640Z","published":"2021-09-01T20:15:07.383Z","references":[{"type":"ADVISORY","url":"https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-596v-3gwh-2m9w"},{"type":"REPORT","url":"https://jira.openolat.org/browse/OO-5548"},{"type":"FIX","url":"https://github.com/OpenOLAT/OpenOLAT/commit/3f219ac457afde82e3be57bc614352ab92c05684"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openolat/openolat","events":[{"introduced":"0"},{"fixed":"e330a255b2c53d1bee0d7193596f88f69a8e4b39"},{"introduced":"9434b5d12118b636f3b59720ba0471f69907ce77"},{"fixed":"3a8c699a653b11a8a3a9b06c28276584abc3868e"},{"fixed":"3f219ac457afde82e3be57bc614352ab92c05684"}],"database_specific":{"cpe":"cpe:2.3:a:frentix:openolat:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"15.3.18"},{"introduced":"15.5.0"},{"fixed":"15.5.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["OpenOLAT_15.5.2","OpenOLAT_15.3.17","OpenOLAT_15.3.16","OpenOLAT_15.5.1","OpenOLAT_15.3.15","OpenOLAT_15.5.0","OpenOLAT_15.3.14","OpenOLAT_15.3.13","OpenOLAT_15.3.12","OpenOLAT_15.3.11","OpenOLAT_15.3.10","OpenOLAT_15.3.9","OpenOLAT_15.3.8","OpenOLAT_15.3.7","OpenOLAT_15.3.6","OpenOLAT_15.3.5","OpenOLAT_15.3.4","OpenOLAT_15.3.3","OpenOLAT_15.3.2","OpenOLAT_15.3.1","OpenOLAT_15.3.0","OpenOLAT_15.2.0","OpenOLAT_15.1.0","OpenOLAT_15.0.0","OpenOLAT_15.pre.9","OpenOLAT_15.pre.7","OpenOLAT_15.pre.6","OpenOLAT_15.pre.4","OpenOLAT_15.pre.3","OpenOLAT_15.pre.2","OpenOLAT_15.pre.1","OpenOLAT_15.pre.0.a","OpenOLAT_14.0.0","OpenOLAT_13.2.0","OpenOLAT_13.0.0","OpenOLAT_13.0.0beta9","OpenOLAT_13.0.0beta8","OpenOLAT_13.0.0beta7","OpenOLAT_13.0.0beta6","OpenOLAT_13.0.0beta5","OpenOLAT_13.0.0beta4","OpenOLAT_13.0.0beta3","OpenOLAT_13.0.0beta1","OpenOLAT_12.3.0","OpenOLAT_12.2.0","OpenOLAT_11.3.0","OpenOLAT_10.0.5","OpenOLAT_10.0.4","OpenOLAT_10.0.3","OpenOLAT_10.0.2","OpenOLAT_10.0.1","OpenOLAT_10.0.0","OpenOLAT_9.2.0","OpenOLAT_9.1.0","OpenOLAT_9.0.0","OpenOLAT_8.1.2","OpenOLAT_8.1.1","OpenOLAT_8.1","OLAT-7.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39181.json","vanir_signatures_modified":"2026-07-09T10:01:37Z","vanir_signatures":[{"id":"CVE-2021-39181-0384a437","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/license/manager/LicenseXStreamHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["206586919595914696442773895008981331884","266068928251343773605279129064178373981","42084984128770438437313811774268319210","125682301429423592297876200859603976547"]}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/OLATUpgrade_12_3_0.java"},"deprecated":false,"digest":{"line_hashes":["50345729017023043718525012551878967777","238177943875262823002901705529441191720","216336490584804368335967645808463983474","21890717857162396846155453434332866363","82007074799076573903657263808101899734","253888711357398050636116796250306921277","194710041179198123818258854322264685304","87089105437523719492414298075657719427"],"threshold":0.9},"id":"CVE-2021-39181-0492a078"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/OLATUpgrade_12_3_0.java","function":"getTitleQTI12"},"deprecated":false,"digest":{"function_hash":"34615253206471570315425527562218711608","length":291},"id":"CVE-2021-39181-052776c4","signature_type":"Function"},{"digest":{"line_hashes":["101222342912416261409844079251004059625","250893823012920404505833516264813780040","43440491315126579050000277506765092769","2645883598727963494778296583021778143"],"threshold":0.9},"id":"CVE-2021-39181-073ff37a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/group/manager/GroupXStream.java"},"deprecated":false},{"target":{"file":"src/main/java/org/olat/core/gui/control/navigation/SiteDefinitions.java"},"deprecated":false,"digest":{"line_hashes":["13670163771383245826909303067359717173","197026644781872299234149058280428567621","193383213374255303030192655391388230798","232861696177252052953416451718639122305"],"threshold":0.9},"id":"CVE-2021-39181-08b4e72c","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/portfolio/EfficiencyStatementMediaHandler.java","function":"getMediaController"},"deprecated":false,"digest":{"function_hash":"257794702517947834505932854215782176464","length":410},"id":"CVE-2021-39181-0db1b487","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/webFeed/portfolio/BlogEntryMediaController.java"},"deprecated":false,"digest":{"line_hashes":["94336136601843945942063786990010160591","49847016141139719777740688378368607213","243257372415733091136331852049615426075","11187994531125241419213226212197345474"],"threshold":0.9},"id":"CVE-2021-39181-12eb185e","signature_type":"Line"},{"digest":{"line_hashes":["159294288134575570812598983851911245477","129550342220364484112222199360232381087","334448897504227070107265529076726516414","56291347268721527062358261656386067933"],"threshold":0.9},"id":"CVE-2021-39181-14f0f2b8","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/taxonomy/manager/TaxonomyCompetenceAuditLogDAO.java"},"deprecated":false},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/vitero/manager/ViteroManager.java"},"deprecated":false,"digest":{"line_hashes":["180864617917980417515601776428093834166","33387376925514063086306297076802919593","251729784924558003248619035610153037912","24134249938839297750342149576928638976"],"threshold":0.9},"id":"CVE-2021-39181-183d1341","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/test/AllTestsJunit4.java"},"deprecated":false,"digest":{"line_hashes":["153493650685789875406615972139694935819","249070901187354469206822518000740170802","146043919208283765668589509152790939738","212202317172945224659629669328218402152","259831780027011496420654141334101873642","287325304158423303731814758973901386612","249045664582988825467008252246629647910","61745482921335721109169026516356424750","294698908132748270839021046919664060434","181389781407268940230340251619036814060","170259136285939905083086328363553503195","102602987573562448025617281872860343272"],"threshold":0.9},"id":"CVE-2021-39181-196f2edb"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"function":"FeedFileStorge","file":"src/main/java/org/olat/modules/webFeed/manager/FeedFileStorge.java"},"deprecated":false,"digest":{"function_hash":"149612171837557416454236413914837079586","length":666},"id":"CVE-2021-39181-19e13cde"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/admin/landingpages/LandingPagesModule.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["171333674829753121399409635966052905379","290101451162447791804259109807949281477","217144873165517728586834410049459420599","170707463694236414034140702100949005848"]},"id":"CVE-2021-39181-1d1efff9","signature_type":"Line"},{"digest":{"function_hash":"15235765323955824071782170133440190714","length":333},"id":"CVE-2021-39181-1ef14d3d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAO.java","function":"createTask"},"deprecated":false},{"digest":{"line_hashes":["51706528866259496323178619890734183964","83177884925938862034866342492023430390","70666063010359998908009625744037285841","325651503382456814212189411849394479380"],"threshold":0.9},"id":"CVE-2021-39181-231fe8d6","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/prefs/db/DbStorage.java"},"deprecated":false},{"target":{"file":"src/main/java/de/bps/course/nodes/ChecklistCourseNode.java","function":"importNode"},"deprecated":false,"digest":{"function_hash":"269526949197312461388003627116931900112","length":593},"id":"CVE-2021-39181-25bdcad9","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/portfolio/manager/MetadataXStream.java"},"deprecated":false,"digest":{"line_hashes":["233101727020289929289160110351340932235","91605053100964234115464733731158248325","34731648554838264717357322425481195783","313003166983436627795755461028674451938"],"threshold":0.9},"id":"CVE-2021-39181-271f2d74"},{"id":"CVE-2021-39181-2e147880","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java","function":"createXStreamInstance"},"deprecated":false,"digest":{"function_hash":"109977604683934521168808003721973219941","length":54}},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/CourseXStreamAliases.java"},"deprecated":false,"digest":{"line_hashes":["220073703159326811019517545727920163730","151933408991873056170303660786563279646","222450186083018384026658009365787959050","274685128866911912482558854263275330433"],"threshold":0.9},"id":"CVE-2021-39181-301a937e","signature_type":"Line"},{"target":{"file":"src/main/java/org/olat/ims/cp/CPManagerImpl.java"},"deprecated":false,"digest":{"line_hashes":["99963412193318818436208381352238045124","23539133986853447204359385372351749959","68517390493030203059804768086614620453","201148899762815441427086724320672560234"],"threshold":0.9},"id":"CVE-2021-39181-310ad32a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/doceditor/discovery/manager/DiscoveryXStream.java"},"deprecated":false,"digest":{"line_hashes":["197737153937467147310117898270958790701","84511257853108577217410910613984607828","73928944268604559473755512486914392110","159464238565347441601620796487745468550"],"threshold":0.9},"id":"CVE-2021-39181-3bbe6a82"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAOTest.java"},"deprecated":false,"digest":{"line_hashes":["222136326520354078025216640800644898387","180626052042983468464917612788045759061","167326511107285687522248022934498461032","109512293672902062581076765984781676585","3417062912939793522527220103345117256","251401894281728395974620031592705464242","293127621538607144339321104024160096321","307174180882863580469153913421315823937","249239574909822087985270782654324625738","193262171281695333921683766081647096983","117927148297040526122003625713292942358","93348729717586195128222240724332085552"],"threshold":0.9},"id":"CVE-2021-39181-3e102f0e","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"32245070839522752590889069015019556880","length":2227},"id":"CVE-2021-39181-3e8ff002","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/nodes/ProjectBrokerCourseNode.java","function":"importProject"}},{"target":{"file":"src/main/java/org/olat/ims/qti21/manager/QTI21ServiceImpl.java"},"deprecated":false,"digest":{"line_hashes":["156947792333383942282064434095411669925","23539133986853447204359385372351749959","329512188124566288826322431953675096642","203937717144549339645654436457320844462"],"threshold":0.9},"id":"CVE-2021-39181-416c47ff","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/xml/EnhancedXStream.java"},"deprecated":false,"digest":{"line_hashes":["111223086031480247281817731206163510195","252214744949991252320164666289494072846","784463386680062109143278391498536831","314825108890792448203091115675673485413","111930689372608895504184689720227664241"],"threshold":0.9},"id":"CVE-2021-39181-41a43802"},{"target":{"file":"src/main/java/org/olat/course/nodes/ProjectBrokerCourseNode.java","function":"exportNode"},"deprecated":false,"digest":{"function_hash":"150647982143666492509902832182709890387","length":2393},"id":"CVE-2021-39181-44ec1cfe","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"id":"CVE-2021-39181-452bd474","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/de/bps/olat/user/ChangeEMailExecuteController.java","function":"changeEMail"},"deprecated":false,"digest":{"function_hash":"73076661884819487196405973766547203736","length":1374}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/lecture/manager/LectureBlockAuditLogDAO.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["103435409569512990835288746269534639895","320826081469638482048741678998384180519","229724794646709455656733078385266833134","73104632071362781264156451236462506513","284706787513154050037870014607300659466","166209199686940272942492417064217588425","245724215220213481222236236599145669722","235241967318908494085826199636363939361","261676357997644489239551389117315769720","133503810749439422977377016281795804071","144006434333752707881181875981299405238","18367319421605051201906514902870549899","119698787734728944651775727858572326559","49213880544787362908563101496236159498","165149070983362515440530862159341087006","46605222587217220348753314591337898531","106828503895527042764003598583977046354","290444939107861844222094861727920692025","180847275501857652183869037895422596473","94398829675575730106954290088614687697"]},"id":"CVE-2021-39181-4543609f"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["277003614473647391936586808982430945896","261458148111208424853043376759655586352","203080437463836917155913097849552736048","9415037138221494820852395198471827288","167655483807561315594339191346653269374","201864788303770260044767260264141851418","96354415053855544839786504949373224127","155934866905933563504359590774230202078","114694786730534800061919685295350218515","114238895936066997834906492504796306293","253416197821867844725009519426173864982","256848102072264138395983944909280552899","136919859267474676183462160214603200651","260135911846719698631923049954041025424","182305702627161806449017358545965424152","301140604550524479202912533684679284535","27015782610299224705842068971123359531","68458401591258857409740393588732071659","308901770368069423704199434963179356715","337703904459330202314015923611798730297","300975406051528275764543498893316508414","130752913088593412223546449395791564768","224629993058961497870819230793867144347"]},"id":"CVE-2021-39181-469e6500","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/instantMessaging/manager/ChatLogHelper.java"}},{"deprecated":false,"digest":{"function_hash":"57953912593847729739164533573448710898","length":167},"id":"CVE-2021-39181-480f6b9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/vitero/manager/ViteroManager.java","function":"init"}},{"deprecated":false,"digest":{"function_hash":"268180509557925202004446570497156203976","length":525},"id":"CVE-2021-39181-48bbea7f","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/dispatcher/mapper/manager/MapperDAO.java","function":"persistMapper"}},{"deprecated":false,"digest":{"function_hash":"337070254454630025678444621017949967633","length":226},"id":"CVE-2021-39181-4b747726","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/instantMessaging/manager/ChatLogHelper.java","function":"init"}},{"digest":{"line_hashes":["12781899057738659478208482253173770818","127473665606159775027518167255454120874","306588611342347898303382229707826065708","264761119321269507775048811648379748688","54065928252161051345040660713354366132","203709951649203424367141317934132432772","74801112138447769710613922521992109538","107556947557559788734548314993279274876","110392645104677134285298418920476147533","171835447494293706921662533033230978226","212405113331874328424181811480808241491","88211726486734178334150914134566234016","180746333479952115575876012620845460948","249682349118169200584606537162193570762","322995310547244285317296733745433134963","91375380860284110930305551333817512390","200715027578454944106599479745141660995","230302434639354895648475320218245667216","328902802362920833222962739539968098479","330898251228620214902545212245830686286","92754405823713774257696208395464679906","228514994233628154726050539906158247483","297602083831733095744029096961713140489","24235197096025364515099228611867611024","246927418760808587012690176059071457770","250961559292129511509945472712598071442","112665124187364044815526894453559982190"],"threshold":0.9},"id":"CVE-2021-39181-4d082ec9","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/UpgradeManager.java"},"deprecated":false},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/de/bps/olat/portal/links/LinksPortlet.java","function":"init"},"deprecated":false,"digest":{"function_hash":"275477716862669981450230926919401155461","length":2255},"id":"CVE-2021-39181-4da5c338","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2021-39181-4ecc9865","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/video/VideoManager.java"},"deprecated":false,"digest":{"line_hashes":["194069476283235705692684952886083518899","56538965173674776611232471012860006224","161187002678561577841312894821323004993","7840549637003142436833189225027025934","288550281469619977662795069616389169135","41929094452626175171682991798075472285","110659259706437437054533992893389113398","24603016072939068710630946365829947238"],"threshold":0.9}},{"id":"CVE-2021-39181-4fe922c5","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/dispatcher/mapper/MapperDAOTest.java","function":"testUpdateMapper_serializade"},"deprecated":false,"digest":{"function_hash":"319265199172276351914533972055929743194","length":1044}},{"deprecated":false,"digest":{"function_hash":"210658527725533412369779306056998354531","length":1151},"id":"CVE-2021-39181-5138fdb4","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/dispatcher/mapper/MapperDAOTest.java","function":"testUpdateMapper_serializade_withExpirationDate"}},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/de/bps/olat/portal/links/LinksPortlet.java"},"deprecated":false,"digest":{"line_hashes":["248594957375484280303509866316476201002","155232125769645504991321020765417495025","272187020875890401745196223917299287244","207290799165144631073904661954157793348","212335338967577802954341308433186072940","263792725826136613184831820686037534978","183728564966831689608495360205815282856","172959096295231797274053575985832617907","159970463807957803558379976339039215337","172187704488903553535134454530536267685","284243961241657884410066890086511236858","241756169387058042110337330878224323324","284890760621659440542087930604799712870","32639446530645537380962373719222217442","241958137084928111515041073726733319223","183728564966831689608495360205815282856","172959096295231797274053575985832617907","233444257700240728581472788761672535457","43268018187594290061444156251507047285","232649623961851892007451838480390834580","313108384687786860828750579335467692316","283696292336117528240451000485065221911","114584831093188993492692613162781839241"],"threshold":0.9},"id":"CVE-2021-39181-530f2e06","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/quality/analysis/manager/AnalysisPresentationXStream.java"},"deprecated":false,"digest":{"line_hashes":["281631640906090460696611008378923600816","84511257853108577217410910613984607828","88958078092336300124638022155320184780","119644418179846010903574033101193172489"],"threshold":0.9},"id":"CVE-2021-39181-57672b08"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/dispatcher/mapper/manager/MapperDAO.java","function":"updateConfiguration"},"deprecated":false,"digest":{"function_hash":"43938657983856192331842095376195420781","length":594},"id":"CVE-2021-39181-60c7de3a"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/forms/model/xml/FormXStream.java"},"deprecated":false,"digest":{"line_hashes":["127052682375113200235190547270582858175","277070469650956519442672188265181242271","72731885626864039792860704624861596743","175893504436939489023740334322457123676"],"threshold":0.9},"id":"CVE-2021-39181-639bc188"},{"digest":{"function_hash":"205354994238448336523698386100510610047","length":1402},"id":"CVE-2021-39181-650424cd","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/config/ui/courselayout/CustomConfigManager.java","function":"saveCustomConfigAndCompileCSS"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/portfolio/EfficiencyStatementMediaHandler.java","function":"export"},"deprecated":false,"digest":{"function_hash":"280264185176619298513590261829789858223","length":620},"id":"CVE-2021-39181-65794a8c"},{"target":{"file":"src/main/java/de/bps/olat/portal/links/LinksPortlet.java","function":"saveLinkList"},"deprecated":false,"digest":{"function_hash":"330412285510654794590610687743571705039","length":452},"id":"CVE-2021-39181-66ca8e27","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/OLATUpgrade_12_3_0.java","function":"migrateDialogElements"},"deprecated":false,"digest":{"function_hash":"116812485627906464763381688495547803351","length":613},"id":"CVE-2021-39181-6b8f9beb","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/dispatcher/mapper/MapperDAOTest.java","function":"testLoadMapper_serializade"},"deprecated":false,"digest":{"length":676,"function_hash":"157764910786182859127140916978064999349"},"id":"CVE-2021-39181-6c1161e2","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/openmeetings/manager/OpenMeetingsDAO.java"},"deprecated":false,"digest":{"line_hashes":["116277285607914168235231418365893527803","140938742526727051374606949801041155893","8201578342316295115925312381830034225","99093086657901593765863762934251848463"],"threshold":0.9},"id":"CVE-2021-39181-6e2630eb"},{"deprecated":false,"digest":{"function_hash":"101185501169443739293655803744259361277","length":53},"id":"CVE-2021-39181-71517615","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java","function":"createXStreamInstanceForDBObjects"}},{"deprecated":false,"digest":{"line_hashes":["97618053233120619464381317827203068281","215787215974400421112882575396812061916","215276675357324745158007971617775059766","199212646131483440414217918937094108047","91322457458309029637110349949681893277","42558179889737355026211923868677888902","310388537529647955299135876046009870613","219741673477451696377814901747375068211","324103044353081108114255263992802946809","262163021462246069502708842466091139576","52266901703292588048225282432278263732","337381527006257703796395035154363929441","42814879070435909142146346865786140446","21103537919451132903674108240294622478","232905634690520762015490859657675960298","115673480651115139705401058319339934147","163799645307971109054967903093165880124","255793025929105409303801834078905077452","302849799170722654871231829747552971285","335391923332883398951730313256478179123"],"threshold":0.9},"id":"CVE-2021-39181-74c1ac93","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/OLATUpgrade_11_3_0.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAOTest.java","function":"todo_oldTasks"},"deprecated":false,"digest":{"function_hash":"77109011832343362696852776570782799563","length":1393},"id":"CVE-2021-39181-76254c67"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/qpool/manager/QuestionItemAuditLogDAO.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["150680756140561704482768360677681603617","71262898249753524416507910385379001213","273893909031740362552257492036862743508","143131058775349440475256810862008898706"]},"id":"CVE-2021-39181-7aa619ce","signature_type":"Line"},{"deprecated":false,"digest":{"length":2800,"function_hash":"210775161467470742474091898457836549715"},"id":"CVE-2021-39181-7ac7fef0","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/group/manager/GroupXStream.java","function":"GroupXStream"}},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"function":"readObject","file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java"},"deprecated":false,"digest":{"function_hash":"128613893685292386807935626456683692777","length":267},"id":"CVE-2021-39181-89568bd8","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["5901651092077049900534724114937140617","304068501542351491665946350171579475390","322329655380722228215989587267178975944","89513276249740177360701871950713714373","204691001100841632734237186183491489911","107504055055011318367518527176733611779","7463859037097829374257803338121418027","210109968480684739103077580285156532564","84626288452103781389634818957561038741","244451216898240741358200430873427000967","43631007152231088931523773142717022663","251615039464024367712409448843333157296","77192625435237870260971292970732885835","152100895606511715446547396999768733629","21166013772461883790590489083747058983","124763701194217104152415049231853614754","195506624236717343611980668321259524652","9555833789660217941555778580414493371","167915153344521150474310049063119900145","115069805298888807558226786062891967364","190986190794554150671119393469662323632","115870264271012856952881951410000996895","112826921209487807788415753018032962811","252935375778599925615628344346207517637","154128745294103114311221911610860743652","53199945896512576234137406836209987395","16179471058461275212740071216179953866","286517254994098438346283022175533349619","321534172476008296191430156414540495637","315566116384242314673992829553672989414"]},"id":"CVE-2021-39181-8aebb0b4","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java"}},{"target":{"file":"src/main/java/de/bps/course/nodes/ChecklistCourseNode.java"},"deprecated":false,"digest":{"line_hashes":["179746900316365208586385366258889910918","162392930134112211147877303420916525887","126083748460409473564871559495689692834","206226797923387162813793110630429047493","288909228381995472000208585131611825947","251615122697242905990165116288262681625","310227570877423645038729491838029726528","316708695534701629803302112809876521879","314829267538722254143879181775708305121","318859521038751271801103702526365821903","39169822797346244210763496535220106490","104238109800789316012297247391924155963","164866051995193845243507114016161374635","283473767087829071197275851183120193792","108267291059567867929225055440185468477","331945552489851259602366254637555896194","189468484597576016574766384367955388047","158813322275956616024328927638616736949"],"threshold":0.9},"id":"CVE-2021-39181-8af1f491","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"digest":{"function_hash":"86075800690901869453207465945035450242","length":1104},"id":"CVE-2021-39181-8d3176b9","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/nodes/ProjectBrokerCourseNode.java","function":"postImport"},"deprecated":false},{"id":"CVE-2021-39181-932fa458","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java","function":"findEfficiencyStatements"},"deprecated":false,"digest":{"length":594,"function_hash":"102900869657486398191058158868318318871"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/modules/glossary/GlossaryItemManager.java"},"deprecated":false,"digest":{"line_hashes":["2292860479224638389300955695377549352","77266885359382898796023659462029700311","303232521877429837078944235081704854859","59962977018984415898447010509706973194","338566705188375618378638898184353021775","180018694808218637530375770103847181122","184630722516279726001903747670644697629","155547673347325794841682147084480543500","147003319283449591779721055360135414055","261323816325095679221498661625158631168","314707942195426093931541156936839225717","303730791552596730654494240213398246166","271075284718900030644882712618628116763","286181202284387939904461619376291121224","65313145840651422393652984993062748391","95194993136198038876987431634357791542"],"threshold":0.9},"id":"CVE-2021-39181-940900fc"},{"deprecated":false,"digest":{"function_hash":"165544375909601840287827688400204546048","length":522},"id":"CVE-2021-39181-94477282","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"function":"archive","file":"src/main/java/org/olat/instantMessaging/manager/ChatLogHelper.java"}},{"deprecated":false,"digest":{"line_hashes":["273645529375888309736053130091468885577","42181766165621036449801734625833611107","288976262158400221763632247879112808604","7615445713554684921650031478639694319"],"threshold":0.9},"id":"CVE-2021-39181-957fbfc9","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/vfs/manager/VFSXStream.java"}},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAO.java"},"deprecated":false,"digest":{"line_hashes":["291154670552034797736008461388465701799","69315747229986589723779123013706563817","163322188724160251405764478852031096165","199137815889674818429950206543972762467","222653460745285604400735261761129809338","266157753947377060083893665629159148481","72010333402307066598493678016753127739","290253429778929196225057415357782181209","119531441613848286061062246897839548276","152322191264825579146634228463790821721","72010333402307066598493678016753127739","290253429778929196225057415357782181209","59057194953473201233836678490314240909","148924555934932716658913398560624334098","53144738206580393308411674178003768613","258651805770311502609217082138576349899","299475508018745923026919615918768047520","241419098331809130284678632518567466073","97268942754616335275895612208166107369"],"threshold":0.9},"id":"CVE-2021-39181-980649da","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2021-39181-996191ae","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/registration/RegistrationManager.java"},"deprecated":false,"digest":{"line_hashes":["103754102768022833437143136640806643374","237989885408325491530111813784599713084","169623179652371894396265563748968921625","188102494582060593622722026754021052874","276077426151817025687366740350631424505","339921687683295647861304861803674972286","60553115741861414079543793012572651344","223094409605411431943458746267549399413","20079837376782404597406663281212182558","189113558408858707115409489681061350416","291779674218019841810772355602042427293","144301258237597124385071994598805624581"],"threshold":0.9}},{"id":"CVE-2021-39181-9a8bfe5d","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/qpool/manager/MetadataConverterHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["24654623880952180289129361652588781449","20402703905345686336585932719876955812","175319484456931673998336264301698615167"]}},{"deprecated":false,"digest":{"function_hash":"260260631462219016159755669793200588375","length":623},"id":"CVE-2021-39181-9b1939b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"function":"getUserEfficiencyStatementByResourceKey","file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java"}},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/id/context/HistoryManager.java"},"deprecated":false,"digest":{"line_hashes":["133578702252402181506477826523493799183","62714552617942334167649761381024189374","231751356695230429784579276750694523479","288519392367034057662820432934531408992"],"threshold":0.9},"id":"CVE-2021-39181-9c21e906","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/ceditor/ContentEditorXStream.java"},"deprecated":false,"digest":{"line_hashes":["86819335417639944395388781974736604623","84511257853108577217410910613984607828","36731147571396526734063002158223261257","155415948180738239268769942968828176471"],"threshold":0.9},"id":"CVE-2021-39181-a05c96a2","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["150599744801167404270376981247941649166","142189366500568331847361027915508342587","268364305358476432901269201364417913229","80470249879652863337868986348160737441","263022648960782761372016739296730925074","106991811596340511473698689317207094540","4004274574163555988412886665169547388","171591545723643871753172824451677668450","84871353655358934538885299934433791811"],"threshold":0.9},"id":"CVE-2021-39181-a308fcf2","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/user/manager/HomePageConfigManagerImpl.java"}},{"target":{"file":"src/main/java/org/olat/repository/RepositoryEntryImportExport.java"},"deprecated":false,"digest":{"line_hashes":["267122818607095696402224183680169458335","88383748794953907870847879590021247282","110595530831625445887793485933429041257","127315352205490467780782277903609142511"],"threshold":0.9},"id":"CVE-2021-39181-a58e207c","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"deprecated":false,"digest":{"length":217,"function_hash":"272581864997784485490588324809722030748"},"id":"CVE-2021-39181-a64d7d33","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/openmeetings/manager/OpenMeetingsDAO.java","function":"init"}},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/archiver/FormatConfigHelper.java"},"deprecated":false,"digest":{"line_hashes":["101382022792290047977079883032814342944","284989269826261167826106376379111284537","2843637112602872160734040303954089319","209305573012988302203989616559146450669"],"threshold":0.9},"id":"CVE-2021-39181-a6a6a2d1","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/core/dispatcher/mapper/MapperDAOTest.java"},"deprecated":false,"digest":{"line_hashes":["226835165938851591556126316642234956830","213466887894430951253191700958572017436","245671824992482159976437278431618349195","61605669534584583913423373073351382032","98235071840398638843827063547931249395","150921379657113417011334072507284535947","102205696796774930178618634960668181720","144609015427618274284243001254857490520","167095166998824553492526659100005866476","273813211044553794870690490690152203371","50672480020795565942219212216836510149","337999933742088384550051602587343495742","290872378755205507941921483855811396066","199340150043855209374918555885118541950","8747812602121258620806680709925401689","118979590314847065478374528625565372458","152075420870038403772862784945206642793","138195217559862756973785459422891932424","275142416744821642539284312570631454046","337999933742088384550051602587343495742","290872378755205507941921483855811396066","199340150043855209374918555885118541950","275893916006029901442613396259891255087","118979590314847065478374528625565372458","152075420870038403772862784945206642793","138195217559862756973785459422891932424","60171045109914585369935805211639610087"],"threshold":0.9},"id":"CVE-2021-39181-a7022037","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2021-39181-a91c6add","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/portfolio/EfficiencyStatementMediaHandler.java"},"deprecated":false,"digest":{"line_hashes":["171780217012354522245723192076677254343","216077335589644723972603407644123496972","14674539686988922816647891991360271908","38735336778920274959707842339140568095","190106685725818059269302953452644241658","331702743510133805035289355971636553827","70848453752027173911593780893560696442","98047236757289061265799585789651819787","45646275720138402791557250953366667107","21213566075829457225466765677887210779","303349424618439487961765492835113837033","336957552114034813675045619965547727335","15154310507942421906474135116854909340","101167536575743114964752338090770090959","8785934727080193764531265369561726635","54935341283722029623943014245246265491","47696711695634703193881671563673008576","205066605688119354584622656382172123562","3577958317698245865895542735420829391","284020583931261241322290392035024290707","102092048171012203471582483934731162736","1557662211172373808003095565562802343","155195440533191304582277052701566273940","162211545929286944997897165960374779991","137620718008430792078367212204988896311","672566599502487796950347474677953911"],"threshold":0.9}},{"deprecated":false,"digest":{"length":389,"function_hash":"193848040460445395730062557132172524137"},"id":"CVE-2021-39181-a99cc5fa","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java","function":"writeObject"}},{"target":{"file":"src/main/java/org/olat/course/config/ui/courselayout/CustomConfigManager.java"},"deprecated":false,"digest":{"line_hashes":["118919037068440943261764704143933885532","57647947260070436143888494219305985064","119264999146889841815361997075328267587","159463019777151320346460882191332020208","29885201314658802739703100116159176507","161284897474614118817312681372005262767","289393609486701514924251690887162289007","193465938824779779357206327361021609153","177383258276250400000086466898452567662","248085550312328752821912588851176867332","201435883522429709544055040795325377144","228360540754063228169960776046577891888","116068994111497346032240339842377963588","50635203660682828282089989154141635067","199551207123553074531095575904999504763"],"threshold":0.9},"id":"CVE-2021-39181-aaa8d1ca","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"deprecated":false,"digest":{"function_hash":"214046977962100725141887090678656634368","length":687},"id":"CVE-2021-39181-b05a85ed","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAO.java","function":"updateTask"}},{"deprecated":false,"digest":{"length":217,"function_hash":"20952910334264438568782841973009484046"},"id":"CVE-2021-39181-b565aeaf","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java","function":"getUserEfficiencyStatementByCourseRepositoryEntry"}},{"target":{"file":"src/main/java/org/olat/core/commons/services/taskexecutor/manager/PersistentTaskDAO.java","function":"createTask"},"deprecated":false,"digest":{"function_hash":"16392669970760976530516564500980508626","length":497},"id":"CVE-2021-39181-bc50584d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/test/java/org/olat/test/VFSJavaIOFile.java"},"deprecated":false,"digest":{"line_hashes":["154058236737024437006072667138201979158","19726028748390209297918290370490631462","200421451043178412490033294141584198857","67102177960386270507211292641602007930","156326835392641344745983645582397472329","277898096066548138665415815492403699849","41410747817637650116183962413926150616","199620841794090085461661294727979556353","39614090873626318254488182335501004901","143085777523105279305934431039360973668","297783574646026125595452000123767376842","242911927003166737433077314521058394970","48968490793893974812542684006766096389","227917962821577928879120469237115120905","221324763771861436953259579421132113750","187026276807424307591337989350261259874","314759651253838084814022893999379783166","137151542161760923737843808085337025616"],"threshold":0.9},"id":"CVE-2021-39181-be023c67","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"260906892365991484475190813551041751028","length":1749},"id":"CVE-2021-39181-bf429b3e","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/OLATUpgrade_11_3_0.java","function":"processVideoResource"}},{"deprecated":false,"digest":{"line_hashes":["149002404547781592996136553317514206816","84511257853108577217410910613984607828","52462447599869185065529368184509454502","111737986974153382446723281938231321709"],"threshold":0.9},"id":"CVE-2021-39181-c164261c","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/config/manager/CourseConfigManagerImpl.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/user/manager/HomePageConfigManagerImpl.java","function":"loadConfigFor"},"deprecated":false,"digest":{"function_hash":"182030381555464744722056704908636055355","length":590},"id":"CVE-2021-39181-c9168c8c"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/dispatcher/mapper/manager/MapperDAO.java","function":"retrieveMapperById"},"deprecated":false,"digest":{"function_hash":"267126269637663983955853080178381561454","length":472},"id":"CVE-2021-39181-c95d0cdb","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/reminder/manager/ReminderRulesXStream.java"},"deprecated":false,"digest":{"line_hashes":["2866596272933669899110605699109431339","113355997223256280213172942812330546574","305352351308447363562168699973149864422","167881342025270838497916650247219524323"],"threshold":0.9},"id":"CVE-2021-39181-cbc39081","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/core/dispatcher/mapper/manager/MapperDAO.java"},"deprecated":false,"digest":{"line_hashes":["291248014726774679261793957314445324510","239762005195827552611319271948727701121","72430914327504288129755353921305086048","141186885663155474237489762972823032730","119126329870166965987326854149922379795","91427308317557722672159342057428845659","49442549574215997338727015521176062371","263296370589204463957617006248551086148","292978629131524070840970959207654749185","15311758197218628103238070815489410429","207909264027358318514586383467190448287","45154615280154325385509571841949658451","209142849958156023353367873854791448954","115485746826048499921411322181089007657","24026730896256402108132380440983897082","4404346654870949886614584591777139824","218867711042712819694343180192255835880","324509818251482061109862171194650228959","227980342246505070150355992362536413613"],"threshold":0.9},"id":"CVE-2021-39181-cc2e2146","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/de/bps/olat/user/ChangeEMailExecuteController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287846692806321099037240811688642908894","218584300640338058255184932414353457425","119782537621597443052994918525600974843","280548093375016127961113524260692392815"]},"id":"CVE-2021-39181-ccf745e9","signature_type":"Line"},{"target":{"file":"src/main/java/de/bps/course/nodes/ChecklistCourseNode.java","function":"exportNode"},"deprecated":false,"digest":{"function_hash":"110349586671929673870450268620323052024","length":348},"id":"CVE-2021-39181-d140f976","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/portfolio/EfficiencyStatementMediaHandler.java","function":"createMedia"},"deprecated":false,"digest":{"length":471,"function_hash":"68654852344515964648805784757424284941"},"id":"CVE-2021-39181-d1740555","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/main/java/org/olat/core/util/xml/XStreamHelper.java","function":"readObject"},"deprecated":false,"digest":{"length":274,"function_hash":"241523261462610766882341204746210272820"},"id":"CVE-2021-39181-d7285ffe","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684"},{"id":"CVE-2021-39181-d9a0a638","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java","function":"getUserEfficiencyStatementByKey"},"deprecated":false,"digest":{"function_hash":"76809337599743451424161531848714130869","length":433}},{"digest":{"line_hashes":["326795655193518351542133546803792937164","80590088214492856520254704111115827843","260940858629360357442224810824406121185","164348768056309116997278010884090949658","77751038125681394451334900627792310123","133581567816662617878804330878261473687","336431883985090089631123535051042905565","243141981279087773797874562177917393201","201787255672404883334130799598025204188","244972387117433592838429564179473892564","18416029930655757429294955019809116513","234589673872728653124647904871741626535","25178265039245076772454990392762205454","97747304410712545482115887711841025780","25800488152194083768310464873752106294","300429886890031103402284981919408261492","330633730992647950319890472963279154315","97747304410712545482115887711841025780","294221475694419886289482850119914244160","11687558997051126453653029908644514438","104349394818081225659000380080467150606","180267431087326465679137538179571513014","5435732494952054519775351908332755217","226043990299248540695887191503320955286"],"threshold":0.9},"id":"CVE-2021-39181-dac32b5a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/assessment/manager/EfficiencyStatementManager.java","function":"fillEfficiencyStatement"},"deprecated":false,"digest":{"function_hash":"13393280909833803374137413699860090014","length":1985},"id":"CVE-2021-39181-dc25be31"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/config/ui/courselayout/CustomConfigManager.java","function":"getCustomConfig"},"deprecated":false,"digest":{"function_hash":"281919778550861678701435766283140349249","length":631},"id":"CVE-2021-39181-dca35a98","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"60527395983302966025431358095835789327","length":245},"id":"CVE-2021-39181-dda180ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/portfolio/handler/BinderXStream.java","function":"toStream"}},{"id":"CVE-2021-39181-def343f6","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/nodes/ProjectBrokerCourseNode.java"},"deprecated":false,"digest":{"line_hashes":["11548005131818925136458573050984897646","9556504969175949644638751008389274104","330734153712569625258199101954660740100","339625511235499210915384979061466565362","249198207848942338563559510993169981590","152353962570681378435545371804057407873","192859219011877839196591018833825134823","119021808273141128517159567179284978525","289367379399351436445354229091773145634","280881961527582936710799286466858647924","245424708233306375026907909788444646174","258031544763982765699848773886515041319"],"threshold":0.9}},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/course/nodes/gta/manager/GTAManagerImpl.java"},"deprecated":false,"digest":{"line_hashes":["155829010229424242152830452473662943270","36532094706224372140570501220414761741","217302377570684090762592213245710471375","106188233863691607725546453577236673419"],"threshold":0.9},"id":"CVE-2021-39181-e5086c8b","signature_type":"Line","signature_version":"v1"},{"digest":{"line_hashes":["45459777018721246308670207752450411628","121743718879931705881549947535868086182","309192771951517147772148032650094259557","231931110988771424128098860010159626231","61388856056050888190701693249103153988","74888425562080387799235315199588290857","214970066535996235413835667389936029781"],"threshold":0.9},"id":"CVE-2021-39181-e97e88d1","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/restapi/repository/course/CourseWebService.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/scorm/ScormMainManager.java"},"deprecated":false,"digest":{"line_hashes":["208612709171534817474163793282957552773","23539133986853447204359385372351749959","142877889683605842690935594691843904272","332829075349757107564058026856705492971"],"threshold":0.9},"id":"CVE-2021-39181-ea6b125f"},{"signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/webFeed/manager/FeedFileStorge.java"},"deprecated":false,"digest":{"line_hashes":["148079912284414093803757320014257233416","251018371421611693047806918237816534653","148732644238400914523070983905043754874","239194211250985555685483220577800075821"],"threshold":0.9},"id":"CVE-2021-39181-eb5ab5e7","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["133101355548532250301601657257670214363","126964651616828267265984841484529154342","111033986882575411083350226447246374530","153571471553975035333907412873818918952"],"threshold":0.9},"id":"CVE-2021-39181-ec2aa8ac","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/dcompensation/manager/DisadvantageCompensationAuditLogDAO.java"}},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/portfolio/handler/BinderXStream.java"},"deprecated":false,"digest":{"line_hashes":["980668917781113088781269828364137937","199251177639761875100953050411859568209","217684000170249172727989524691178572945","27853873523083525790711070571789872148","51541197746451085656211649579018877164","311689649703755368058684269188323218286","198189130849987330989421923289109607813","187652006565384047177337497430541379683","116283794073318588369947205330161262047","38944606028899733440914011578337422694","283923696114978771438945590077308071887","172497482950772351537502828682691266971"],"threshold":0.9},"id":"CVE-2021-39181-ec60a7e1","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"167895503218277405487023335360112431358","length":606},"id":"CVE-2021-39181-ed0b6354","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/de/bps/course/nodes/ChecklistCourseNode.java","function":"archiveNodeData"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/portfolio/manager/PortfolioServiceImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["306877794594407039091904751015048370368","266861347530295286849061653600010057483","84173144438431748584914547187937690330","155047260991329529899270570496447633314"]},"id":"CVE-2021-39181-f09186cb"},{"digest":{"line_hashes":["187305590527817431607633556804982981484","84511257853108577217410910613984607828","5462216676319116983819204368523885819","28772082336826792419237568558592357157"],"threshold":0.9},"id":"CVE-2021-39181-f2670768","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/video/manager/VideoXStream.java"},"deprecated":false},{"id":"CVE-2021-39181-f5881e2d","signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/video/manager/VideoMetaXStream.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["297062355967631500252540141075272975413","31337323026964585983806188936708981107","234035633294792758131627656246704549360","303591310127033323652545919639881985594","206567888626987618667543273016228262354","339137890558174788206804913284119129543","84511257853108577217410910613984607828","19288856123051589078020123088260379419","261253202383369661317372265739937754285","298006515607218416808529995255582487124","48297350660738888467275512951614100310"]}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/curriculum/manager/CurriculumXStream.java"},"deprecated":false,"digest":{"line_hashes":["83411759699601919735599054463277137108","136873284381200109519891135082425026175","4529511944934236163078020039555791755","4543546853062973574209034226344154049"],"threshold":0.9},"id":"CVE-2021-39181-f61811c3"},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/video/manager/VideoManagerImpl.java"},"deprecated":false,"digest":{"line_hashes":["196944536400737168775617098112265197613","292955366029757113445062739912287914894","134227233897829762620040923728320350914","273067485264214500045125057472630945090","34494041615873773121044072946366137405","166130581967527880160660872025880686141","6099084743634173705708036310389508851","62998776413089472673283918021230869872","250889085696145881853286411847124277734","44326037668617284185980550526352573097","140213445003671364706420406710812393566","162258927190667345935363307069349401060","80617032348030950601134182841564581299","155286385882996570319127653698657579389","102308366357054514285307475594599815596","111106639122235668039694155904913124616","293763353939028519396389499127937413455","97949950365276714216901740968274783317","157956719345688819359291914266696529788","102177969066777714436469148221459080421","65107900435382336485300210739131633030","65205685806914111217411400501701470414","25303858312438701009353953163022918548","51374329025371284504297902842872801694","307837923963529717484962327144052223640","292358466290932686054295082742404339110","209540420578694369937829668346363955767","312412657312687757184383361372997504209","241487083576020344034113834609029500588","55990495682579429250909027020021791674","95036587111220670008696271406766957193","27847206856503706752110881031447153563","233933122194155337191680965871141227700","270914555538283357982879330963704929276","235276541396816589067140014512287071965","126851849184423444558897276775572296064","92865131089330417350203379006108152483","152410806474532127211375374588696156594","309919778225717520939283767014151852566","246448001556986947869697942251907437704","260885356735687751633063335405574093862","226329021440978277731066524570096003599","236999926747396654097135425588513773152"],"threshold":0.9},"id":"CVE-2021-39181-f6429ad5","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2021-39181-f6c60cc0","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/upgrade/UpgradeManager.java","function":"initUpgradesHistories"},"deprecated":false,"digest":{"length":467,"function_hash":"130739422842347113426023577237407340581"}},{"digest":{"function_hash":"233902635914172526930839049292267896621","length":267},"id":"CVE-2021-39181-f7439e6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/modules/portfolio/handler/BinderXStream.java","function":"fromPath"},"deprecated":false},{"source":"https://github.com/openolat/openolat/commit/3f219ac457afde82e3be57bc614352ab92c05684","target":{"file":"src/main/java/org/olat/user/propertyhandlers/UserInterestsPropertyHandler.java"},"deprecated":false,"digest":{"line_hashes":["38927084282395414543750169382764820430","333554965293676505216188575029987129395","34129899919672353588095282730545515309","244661727943430067352559526839369706476"],"threshold":0.9},"id":"CVE-2021-39181-fbc1821d","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}