Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-26987

An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Konga Project
Products
Konga
CVE-2021-42192

Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.

CVSS 3.1 · 8.8 High EPSS 9.8% KEV · Not listed
Vendors
Konga Project
Products
Konga