← Database

CVE-2022-45931

HIGH CVSS: 7.5 Published: 2022-11-27 Modified: 2026-06-17

Description

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used.

Affected Platforms

Linuxfoundation Opendaylight

Weakness Type

CWE-89, CWE-89

References