CVE-2025-28096中危 5.4OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.
CVE-2023-7210严重 9.8A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=…
CVE-2022-26276中危 5.3An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.
CVE-2021-38712高危 7.5OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via a…
CVE-2021-38138中危 5.4OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at…