VULNERABILITY INTELLIGENCE

CVE-2025-28097

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-03-28
Last modified2026-06-17

Description

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.