A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.
References
| Link | Resource |
|---|---|
| https://www.edoardoottavianelli.it/ | Not Applicable |
| https://www.edoardoottavianelli.it/CVE-2023-24279 | |
| https://www.youtube.com/watch?v=1mSXzzwcGMM | Exploit Third Party Advisory |
| https://www.edoardoottavianelli.it/ | Not Applicable |
| https://www.edoardoottavianelli.it/CVE-2023-24279 | |
| https://www.youtube.com/watch?v=1mSXzzwcGMM | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.edoardoottavianelli.it/ - Not Applicable | |
| References | () https://www.edoardoottavianelli.it/CVE-2023-24279 - | |
| References | () https://www.youtube.com/watch?v=1mSXzzwcGMM - Exploit, Third Party Advisory |
Information
Published : 2023-03-14 01:15
Updated : 2024-11-21 07:47
NVD link : CVE-2023-24279
Mitre link : CVE-2023-24279
CVE.ORG link : CVE-2023-24279
JSON object : View
Products Affected
opennetworking
- onos
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')