Konga Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Konga Project records in CISA KEV

No Konga Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-11859 CVE-2023-26987 · GHSA-3q3f-6h94-9gg7

MEDIUM 62

An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0108 Published 2023-05-01 No fix listed

TI-2021-18661 CVE-2021-42192 · GHSA-g934-4c2x-9pcq

MEDIUM 50

Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.098 Published 2022-05-04 No fix listed CWE-863