This article discusses XSS vulnerabilities found in the Floodlight and ONOS controllers. Exploits and mitigation strategies are provided.
Exploiting OpenDaylight CVE-2017-1000357 with sdnpwn
A description of CVE-2017-1000357 and how to exploit it using sdnpwn.