medium4.3
CVE-2020-27958
The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted inpu…
Impact
The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osu | Ohio Supercomputer Center Open Ondemand | before 1.7.19 from 1.8.0 before 1.8.18 |
Weakness classification
References
- NVD record
- CVE.org record
- https://discourse.osc.edu/t/security-fix-in-open-ondemand-1-8-18-and-1-7-19-patch-releases-now-available/1198
- https://github.com/OSC/Open-OnDemand/commits/master
- https://listsprd.osu.edu/pipermail/ood-users/
- https://discourse.osc.edu/t/security-fix-in-open-ondemand-1-8-18-and-1-7-19-patch-releases-now-available/1198
- https://github.com/OSC/Open-OnDemand/commits/master
- https://listsprd.osu.edu/pipermail/ood-users/