Cross Site Scripting (XSS)
Discription

onos-api is vulnerable to Cross Site Scripting. The vulnerability exists due to the vulnerable swagger dependency used in the library since it does not properly sanitize the `authorizationUrl`, which allows an attacker to execute arbitrary code when uploading a crafted YAML file.Read More

Back to Main

Subscribe for the latest news: