Konga Project Konga
2 CVEs affecting Konga Project Konga. Latest disclosed: 2023-05-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42192 | High | 8.8 | 2022-05-04 | Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation. |
CVE-2023-26987 | Medium | 6.5 | 2023-05-01 | An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request. |