cveboard RSS feed

CVE-2023-7210

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

OneNav API improper authentication

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249765 was assigned to this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

OneNav

Vendor
n/a
Product
OneNav
Platforms
Unknown
Default status
Unknown
OneNav · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0.9.0affectedUnavailableUnavailableUnavailableNone listed
0.9.1affectedUnavailableUnavailableUnavailableNone listed
0.9.2affectedUnavailableUnavailableUnavailableNone listed
0.9.3affectedUnavailableUnavailableUnavailableNone listed
0.9.4affectedUnavailableUnavailableUnavailableNone listed
0.9.5affectedUnavailableUnavailableUnavailableNone listed
0.9.6affectedUnavailableUnavailableUnavailableNone listed
0.9.7affectedUnavailableUnavailableUnavailableNone listed
0.9.8affectedUnavailableUnavailableUnavailableNone listed
0.9.9affectedUnavailableUnavailableUnavailableNone listed
0.9.10affectedUnavailableUnavailableUnavailableNone listed
0.9.11affectedUnavailableUnavailableUnavailableNone listed
0.9.12affectedUnavailableUnavailableUnavailableNone listed
0.9.13affectedUnavailableUnavailableUnavailableNone listed
0.9.14affectedUnavailableUnavailableUnavailableNone listed
0.9.15affectedUnavailableUnavailableUnavailableNone listed
0.9.16affectedUnavailableUnavailableUnavailableNone listed
0.9.17affectedUnavailableUnavailableUnavailableNone listed
0.9.18affectedUnavailableUnavailableUnavailableNone listed
0.9.19affectedUnavailableUnavailableUnavailableNone listed
0.9.20affectedUnavailableUnavailableUnavailableNone listed
0.9.21affectedUnavailableUnavailableUnavailableNone listed
0.9.22affectedUnavailableUnavailableUnavailableNone listed
0.9.23affectedUnavailableUnavailableUnavailableNone listed
0.9.24affectedUnavailableUnavailableUnavailableNone listed
0.9.25affectedUnavailableUnavailableUnavailableNone listed
0.9.26affectedUnavailableUnavailableUnavailableNone listed
0.9.27affectedUnavailableUnavailableUnavailableNone listed
0.9.28affectedUnavailableUnavailableUnavailableNone listed
0.9.29affectedUnavailableUnavailableUnavailableNone listed
0.9.30affectedUnavailableUnavailableUnavailableNone listed
0.9.31affectedUnavailableUnavailableUnavailableNone listed
0.9.32affectedUnavailableUnavailableUnavailableNone listed
0.9.33affectedUnavailableUnavailableUnavailableNone listed