Iratechiapet

**Name of the Vulnerable Software and Affected Versions** Open OnDemand versions prior to 4.0.11 Open OnDemand versions prior to 4.1.5 Open OnDemand versions prior to 4.2.2 **Description** Specially crafted filenames can lead to the execution of arbitrary JavaScript within the file browser of this high-performance computing portal. **Recommendations** Update to version 4.0.11. Update to version 4.1.5. Update to version 4.2.2.

**Name of the Vulnerable Software and Affected Versions** Open OnDemand versions prior to 4.0.9 Open OnDemand versions prior to 4.1.3 **Description** The Files application in Open OnDemand is susceptible to malicious input when navigating to a directory. This issue affects installations prior to versions 4.0.9 and 4.1.3. **Recommendations** Update to Open OnDemand version 4.0.9 or later. Update to Open OnDemand version 4.1.3 or later.