PT-2021-11981 · Unknown · Open Ondemand

Published 2021-02-19 · Updated 2021-02-24 · CVE-2020-36247

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Open OnDemand versions 1.5.7 and earlier Open OnDemand versions 1.6.x through 1.6.21

Description: The issue allows for CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application.

Recommendations: For Open OnDemand versions 1.5.7 and earlier, update to version 1.5.7 or later. For Open OnDemand versions 1.6.x through 1.6.21, update to version 1.6.22 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-36247

Affected Products

Open Ondemand

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-36247 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36247 · Vendor Advisory
• https://t.me/cibsecurity/23842 · Telegram Post
• https://listsprd.osu.edu/pipermail/ood-users/2020-April/000397.html · Note
• https://t.me/cvenotify/10130 · Telegram Post
• https://t.me/cvenotify/10148 · Telegram Post