CVE-2020-36247: Osc Open Ondemand

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.

Affected products

• Osc Open Ondemand: before 1.5.7 (fixed in 1.5.7); from 1.6.0, before 1.6.22 (fixed in 1.6.22)

Published 2021-02-19. Last modified 2026-06-17.