VULNERABILITY INTELLIGENCE

CVE-2023-24279

CVSS score6.1 MEDIUM

EPSS probability0.63%

CISA KEVNot currently listed

Published2023-03-14

Last modified2026-06-17

Description

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.