Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18685
Reference (s):
- https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U