CVE-2020-27958
MEDIUMOhio Supercomputer Center Open OnDemand <1.7.19, <1.8.18 - Command ...
Title source: llmDescription
The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template.
References (3)
Core 3
Core References
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/OSC/Open-OnDemand/commits/master
Broken Link, Vendor Advisory x_refsource_misc
https://listsprd.osu.edu/pipermail/ood-users/
Release Notes, Vendor Advisory x_refsource_confirm
https://discourse.osc.edu/t/security-fix-in-open-ondemand-1-8-18-and-1-7-19-patch-releases-now-available/1198
Scores
CVSS v3
4.3
EPSS
0.0101
EPSS Percentile
58.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-116
Status
published
Products (1)
osu/ohio_supercomputer_center_open_ondemand
< 1.7.19
Published
Feb 26, 2022
Tracked Since
Feb 18, 2026