Kong
by Kong
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-39846 | Cri | 0.64 | 9.8 | 0.01 | Aug 16, 2023 | An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token. | ||
| CVE-2020-35189 | Cri | 0.64 | 9.8 | 0.02 | Dec 17, 2020 | The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. | ||
| CVE-2023-26987 | Med | 0.42 | 6.5 | 0.01 | May 1, 2023 | An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request. | ||
| CVE-2023-2418 | Low | 0.20 | 3.1 | 0.01 | Apr 29, 2023 | A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitability is told to be… |
- risk 0.64cvss 9.8epss 0.01
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
- risk 0.64cvss 9.8epss 0.02
The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
- risk 0.42cvss 6.5epss 0.01
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
- risk 0.20cvss 3.1epss 0.01
A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitability is told to be…