Lucene search
PantselKonga0.14.9
2 matches found
CVE-2024-34243
Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.
5.4CVSS5.9AI score0.00286EPSS
CVE-2023-39846
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
9.8CVSS9.2AI score0.00173EPSS