Onenav Security Vulnerabilities

CVE-2023-7210

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2022-26276

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory...