CVE-2025-53636CWE-400CWE-779

Open OnDemand Shell App closed websocket DoS

Medium · published July 11, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

Open OnDemand is an open-source HPC portal. Users can flood logs by interacting with the shell app and generating many errors. Users who flood logs can create very large log files causing a Denial of Service (DoS) to the ondemand system. This vulnerability is fixed in 3.1.14 and 4.0.6.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.7th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-779 · Logging of Excessive Data
Published
2025-07-11T21:20Z
EPSS history
Timeline
  • 11 JUL 21:20Z
    Open OnDemand Shell App closed websocket DoS
    cvelistv5