gerrit.onosproject.org
https://gerrit.onosproject.org/ CVE-2019-13624
CRITICAL
Record summary
CVE-2019-13624 has a selected CVSS score of 9.8 (critical).
Description
In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command.
Description source: CVE List
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-13624