CVE-2025-53636

MEDIUM EPSS 19.4%

Published Jul 11, 202511mo ago · Modified Jun 17, 20262w ago

5.4 CVSS 3.1

Medium

Published Jul 11, 2025 11mo ago

Last Modified Jun 17, 2026 2w ago

Description

Open OnDemand is an open-source HPC portal. Users can flood logs by interacting with the shell app and generating many errors. Users who flood logs can create very large log files causing a Denial of Service (DoS) to the ondemand system. This vulnerability is fixed in 3.1.14 and 4.0.6.

CVSS Details

Base Score

5.4

Exploitability

2.8

Impact

2.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

19.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

CWE-779

References 3

github.com https://github.com/OSC/ondemand/commit/40800d68cd019c5f1c48b2deafebba6dff4abee2
github.com https://github.com/OSC/ondemand/commit/96f29b995e1add7562516614e4dc8d961987e8b4
github.com https://github.com/OSC/ondemand/security/advisories/GHSA-x5xv-fw37-v524

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.