CVE-2018-1999020: Opennetworking Onos

Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion (overwrite). This attack appear to be exploitable via a specially crafted zip file should be uploaded.

Affected products

• Opennetworking Onos: up to and including 1.13.2

Published 2018-07-23. Last modified 2026-06-17.