VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 28, 2020· Updated Jun 17, 2026

CVE-2020-10944

CVE-2020-10944

Description

HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. Fixed in 0.10.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Hashicorp/Nomadllm-fuzzy3 versions
    <=0.10.4+ 2 more
    • (no CPE)range: <=0.10.4
    • cpe:2.3:a:hashicorp:nomad:*:*:*:*:*:*:*:*range: >=0.3,<0.10.5
    • cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*range: >=0.3,<0.10.5
  • Hashicorp/Nomad Enterprisellm-fuzzy
    Range: <=0.10.4
  • HashiCorp/Nomad Enterprisedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.