CVE-2025-28097 Information

Description

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.

Reference

https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465

Share on: