Unscored CVE-2021-38712 EUVD-2021-25150GHSA-jw9h-cfww-j6fj

OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via …

Published Aug 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configuration file.

References

https://github.com/helloxz/onenav/issues/25