CVE-2021-38712

OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents

published August 16, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configuration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01145 · 66.5th percentile
Published
2021-08-16T03:35Z
EPSS history
Timeline
  • 16 AUG 03:35Z
    OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents
    cvelistv5