PT-2026-40947 · Osc · Ondemand

Iratechiapet · Publicado 2026-05-14 · Atualizado 2026-05-14 · CVE-2026-44371

NVD

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-44371

Produtos afetados

Ondemand

Referências · 2

• https://github.com/OSC/ondemand/security/advisories/GHSA-xcv4-m435-m33h · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44371 · Nota de Segurança