Open OnDemand Files Application Directory Navigation Malicious Input Vulnerability

A vulnerability exists in the Files application of Open OnDemand, specifically in versions prior to 4.0.9 and 4.1.3. This vulnerability allows for malicious input when users navigate to a directory. The issue has been addressed in versions 4.0.9 and 4.1.3, leaving earlier versions susceptible.

Impact

Exploitation of this vulnerability could lead to the injection of malicious input, potentially causing unintended behavior in the application.

Reproduction

The vulnerability can be reproduced by using Open OnDemand versions prior to 4.0.9 or 4.1.3. Navigate to a directory within the Files application, which will trigger the vulnerability by allowing malicious input to be processed.

Remediation

Users can upgrade to Open OnDemand versions 4.0.9 or 4.1.3 to address this vulnerability.