Description
An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.
Unscored
CVE-2019-12112
EUVD-2019-3763GHSA-c5mv-4p22-7x9x
An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker …
Published Mar 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre