CVE-2020-18685

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-09-30

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Floodlight (Atlassian)

References

• https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U