Description
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249765 was assigned to this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a OneNav
0.9.0affected0.9.1affected0.9.2affected0.9.3affected0.9.4affected0.9.5affected0.9.6affected0.9.7affected0.9.8affected0.9.9affected0.9.10affected0.9.11affected0.9.12affected0.9.13affected0.9.14affected0.9.15affected0.9.16affected0.9.17affected0.9.18affected0.9.19affected0.9.20affected0.9.21affected0.9.22affected0.9.23affected0.9.24affected0.9.25affected0.9.26affected0.9.27affected0.9.28affected0.9.29affected0.9.30affected0.9.31affected0.9.32affected0.9.33affected