PT-2025-29283 · Unknown · Open Ondemand

Csc-Swesters + 1 · Published 2025-07-11 · Updated 2025-07-12 · CVE-2025-53636

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Open OnDemand versions prior to 3.1.14 Open OnDemand versions prior to 4.0.6

Description: Open OnDemand, an open-source HPC portal, is susceptible to a denial-of-service (DoS) condition. By interacting with the shell application and generating numerous errors, users can flood logs, creating excessively large log files. This log flooding can lead to a DoS attack against the Open OnDemand system.

Recommendations: Update Open OnDemand to version 3.1.14 or later. Update Open OnDemand to version 4.0.6 or later.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-779

CWE-400

Related Identifiers

CVE-2025-53636

GHSA-X5XV-FW37-V524

Affected Products

Open Ondemand

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53636.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-53636 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53636 · Vendor Advisory
• https://github.com/OSC/ondemand/security/advisories/GHSA-x5xv-fw37-v524 · Note
• https://github.com/OSC/ondemand/commit/40800d68cd019c5f1c48b2deafebba6dff4abee2 · Note
• https://github.com/OSC/ondemand/commit/96f29b995e1add7562516614e4dc8d961987e8b4 · Note
• https://t.me/cvetracker/27602 · Telegram Post
• https://twitter.com/CVEnew/status/1943789980943306992 · Twitter Post
• https://t.me/cvenotify/128660 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1943817293324021917 · Twitter Post