critical9.8
CVE-2023-39846
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
Impact
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pantsel | Konga | Version 0.14.9 |