OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.

Published Mar 28, 2025 · Updated Apr 1, 2025 · Assigned by mitre