Description
Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions below this remain susceptible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OSC | ondemand | < 4.0.9, >= 4.1.0, < 4.1.3 | — |