CVE:CVE-2022-45931
CNNVD:CNNVD-202211-3537
OpenDaylight（ODL）是OpenDaylight开源的一个开源 SDN 控制器。
OpenDaylight（ODL）0.16.5之前的版本存在安全漏洞，该漏洞源于其aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java组件中/auth/v1/users/ API接口的deleteUser函数允许攻击者实现SQL注入。
solution:Upgrade linuxfoundation opendaylight to a higher version than 0.15.0,0.15.6,0.16.0,0.16.4,and avoid the version 0.15.0,0.15.6,0.16.0,0.16.4