CVE

CVE-2024-33832

6.3

CVSSmedium

Exploitable remotely over the internet · low-privilege account sufficient.

Description

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /index.php?c=api&method=get_link_info.

Attack Vector

Network

Privileges Req.

Low

User Interaction

None

onenav

Updated Sep 26, 2026View on NVD →

S4E scanner

CVE-2024-33832 Scanner

CVE-2024-33832 Scanner - Server-Side Request Forgery (SSRF) vulnerability in OneNav

Used 2.3k times · 3.3k assets checked · domain, subdomain, ipv4

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.