offensive-onos

Offensive ONOS 我在武器化ONOS应用中的实验。 这是我网络安全硕士论文研究活动的一部分（链接），专注于软件定义网络中跨应用投毒攻击的检测。 这项研究还导致发现了CVE-2023-24279和CVE-2023-30093。 获取背景知识的有用论文： 软件定义网络中的跨应用投毒 我的硕士学位论文 保护虚拟可编程交换机免受跨应用投毒（CAP）攻击 软件定义网络中投毒攻击的分类 软件定义网络综述：下一代网络架构 要求 JVM 11+ https://www.oracle.com/java/technologies/downloads/ Maven...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-30093

CVE-2023-30093 is a cross-site scripting (XSS) vulnerability affecting Open Networking Foundation ONOS, from version v1.9.0 through v2.7.0. The issue enables execution of arbitrary web scripts/HTML via a crafted payload injected into the url parameter of the API documentation dashboard. The provi...