CVE-2025-28097 - OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers

MEDIUM

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers

Published Mar 28, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-8670		Advisory
https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 28, 2025

Updated Apr 1, 2025

Reserved Mar 11, 2025

CISA Vulnrichment

Updated Mar 31, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 28, 2025

Updated Apr 1, 2025

GitHub

No data