Vendor
KongHQ
Products
2
CVEs
3
Across products
3
Status
Private
Products
2- 2 CVEs
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-44487 | Hig | 0.65 | 7.5 | 1.00 | KEV | Oct 10, 2023 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | |
| CVE-2023-39846 | 0.00 | — | 0.01 | Aug 16, 2023 | An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token. | |||
| CVE-2023-26987 | 0.00 | — | 0.01 | May 1, 2023 | An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request. |
- risk 0.65cvss 7.5epss 1.00
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- CVE-2023-39846Aug 16, 2023risk 0.00cvss —epss 0.01
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
- CVE-2023-26987May 1, 2023risk 0.00cvss —epss 0.01
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.