Konga
Pantsel · 2 CVEs
CVE-2024-34243
MEDIUM
Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.
May 14, 2024
CVE-2023-39846
CRITICAL
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
Aug 16, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-34243 | Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter. | MEDIUM | 0.45% | May 14, 2024 |
| CVE-2023-39846 | An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token. | CRITICAL | 1.12% | Aug 16, 2023 |
Showing 1 to 2 of 2 CVEs