Lucene search
Veracode Vulnerability DatabaseVERACODE:40426HistoryMay 09, 2023 - 4:20 a.m.
Cross Site Scripting (XSS)
2023-05-0904:20:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross site scripting
onos-api
authorizationurl
yaml file
vulnerability
0.001 Low
EPSS
Percentile
39.9%
onos-api is vulnerable to Cross Site Scripting. The vulnerability exists due to the vulnerable swagger dependency used in the library since it does not properly sanitize the authorizationUrl, which allows an attacker to execute arbitrary code when uploading a crafted YAML file.
Related
github
github
ONOS vulnerable to Cross-site Scripting
2023-05-05 00:30:19
osv
osv
CVE-2023-30093
2023-05-04 22:15:09
ONOS vulnerable to Cross-site Scripting
2023-05-05 00:30:19
nvd
nvd
CVE-2023-30093
2023-05-04 22:15:09
prion
prion
Cross site scripting
2023-05-04 22:15:00
cve
cve
CVE-2023-30093
2023-05-04 22:15:09
cvelist
cvelist
CVE-2023-30093
2023-05-04 00:00:00