← All advisories

Unrated severityNVD Advisory· Published Aug 16, 2023· Updated Oct 8, 2024

CVE-2023-39846

CVE-2023-39846

Description

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.

Affected products

2

Konga/Kongadescription
KongHQ/Kongallm-fuzzy
Range: =0.14.9

Patches

Vulnerability mechanics

References

1

abyssaler.github.io/post/konga%20Unauthorized%20accessmitre

News mentions

0

No linked articles in our index yet.