medium5.4
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.
Impact
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onenav | Onenav | Version 1.1.0 |