CVE-2022-35503

Open Source MANO versions v7 through v12 are vulnerable to arbitrary code execution due to improper verification of user input. An authenticated attacker can exploit this by using a Virtual Network Function (VNF) descriptor to execute code within the LCM module container . Successful exploitation...