Pantsel: Security Vulnerabilities
Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.
CVSS Score
5.4
EPSS Score
0.003
Published
2024-05-14
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-08-16