offensive-onos

攻撃的ONOS 私のONOSアプリケーションの兵器化実験。 これは、ソフトウェア定義ネットワークにおけるCross App Poisoning Attacksの検出に焦点を当てた、私のサイバーセキュリティ修士論文（リンク）の研究活動の一部です。 この研究は、CVE-2023-24279とCVE-2023-30093の発見にもつながりました。 参考になる論文: Cross-App Poisoning in Software-Defined Networking 私の修士論文 Protecting Virtual Programmable Switches from Cross-App...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-30093

CVE-2023-30093 is a cross-site scripting (XSS) vulnerability affecting Open Networking Foundation ONOS, from version v1.9.0 through v2.7.0. The issue enables execution of arbitrary web scripts/HTML via a crafted payload injected into the url parameter of the API documentation dashboard. The provi...