Description OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers. References https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465