Description
Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OSC | ondemand | < 4.0.11, >= 4.1.0, < 4.1.5, >= 4.2.0, < 4.2.2 | — |