VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 17, 2019· Updated Jun 17, 2026

CVE-2019-13624

CVE-2019-13624

Description

In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command.

Affected products

3
  • Onosproject/Onosllm-create2 versions
    =1.15.0+ 1 more
    • (no CPE)range: =1.15.0
    • cpe:2.3:a:onosproject:onos:1.15.0:*:*:*:*:*:*:*
  • ONOS/ONOSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.