← CVE Intelligence

CVE-2026-44371

Open OnDemand: Specially crafted filenames can execute javascript in the file browser PUBLISHED

Description (CNA)

Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.

Affected (CNA)

Vendor / productVersions
OSC / ondemandaffected < 4.0.11; affected >= 4.1.0, < 4.1.5; affected >= 4.2.0, < 4.2.2

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.