Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-10944
5.4
MEDIUMCVSS v3
Published
April 28, 2020
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. Fixed in 0.10.5.
hashicorp/nomad
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.>= 0.3, < 0.10.5NVD