CVE-2019-13624

2019-07-1703:15:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command.

CPENameOperatorVersion
onoseq1.1.0-rc2
onoseq1.11.0-b2
onoseq1.7.0-rc2
onoseq1.13.0-b6
onoseq1.5.0-rc2
onoseq1.8.0-rc4
onoseq1.13.0-b8
onoseq1.2.0-rc1
onoseq1.8.0-rc3
onoseq1.15.0-rc1

Name	Operator	Version
onos	eq	1.1.0-rc2
onos	eq	1.11.0-b2
onos	eq	1.7.0-rc2
onos	eq	1.13.0-b6
onos	eq	1.5.0-rc2
onos	eq	1.8.0-rc4
onos	eq	1.13.0-b8
onos	eq	1.2.0-rc1
onos	eq	1.8.0-rc3
onos	eq	1.15.0-rc1

Rows per page:

1-10 of 371

References

gerrit.onosproject.org/#/c/20767/