PT-2022-17760 · Onenav · Onenav

Le0Nsec · Published 2022-03-12 · Updated 2022-09-28 · CVE-2022-26276

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions OneNav version 0.9.14

Description An issue in the index.php file allows attackers to perform directory traversal.

Recommendations For OneNav version 0.9.14, update to a version that fixes the issue in index.php to prevent directory traversal attacks.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-26276

Affected Products

Onenav

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-26276 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26276 · Vendor Advisory
• https://github.com/helloxz/onenav/issues/44 · Note
• https://t.me/cibsecurity/38836 · Telegram Post