An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.

Published Aug 16, 2023 · Updated Oct 8, 2024 · Assigned by mitre