VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 18, 2020· Updated Jun 17, 2026

CVE-2019-12112

CVE-2019-12112

Description

An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.

Affected products

2
  • ONAP/SDNCdescription
  • ONAP/SDNCllm-create
    Range: < Dublin

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.