Pantsel

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pantsel records in CISA KEV

No Pantsel vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-20800 CVE-2023-39846 · GHSA-vhc6-jqc9-r7mv

HIGH 82

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01118 Published 2023-08-16 No fix listed CWE-287

TI-2024-22652 CVE-2024-34243 · GHSA-93pf-mrc8-4g3h

LOW 25

Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00446 Published 2024-05-14 No fix listed CWE-79