CVE-2026-44371 — Open OnDemand: Specially crafted filenames can execute javascript in the file browser
Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This…
Published: 2026-05-14 · CVSS: 5.3 · CVSS 4.0
Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7