CVE-2023-24279

2023-03-1400:00:00

mitre

www.cve.org

cross-site scripting

open networking foundation

api documentation

0.001 Low

EPSS

Percentile

30.8%

JSON

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.