Description (CNA)
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249765 was assigned to this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OneNav | affected 0.9.0; affected 0.9.1; affected 0.9.2; affected 0.9.3; affected 0.9.4; affected 0.9.5; affected 0.9.6; affected 0.9.7; affected 0.9.8; affected 0.9.9; affected 0.9.10; affected 0.9.11; affected 0.9.12; affected 0.9.13; affected 0.9.14; affected 0.9.15; affected 0.9.16; affected 0.9.17; affected 0.9.18; affected 0.9.19; affected 0.9.20; affected 0.9.21; affected 0.9.22; affected 0.9.23; affected 0.9.24; affected 0.9.25; affected 0.9.26; affected 0.9.27; affected 0.9.28; affected 0.9.29; affected 0.9.30; affected 0.9.31; affected 0.9.32; affected 0.9.33 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.