Description
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
Medium · 6.5
CVE-2023-26987
EUVD-2023-30777GHSA-3q3f-6h94-9gg7
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
Published May 1, 2023 · Updated Jan 30, 2025 · Assigned by mitre