What is the severity of CVE-2023-2418?

The severity of CVE-2023-2418 is medium.

What is the affected software for CVE-2023-2418?

The affected software for CVE-2023-2418 is Kong 2.8.3.

What is the CWE ID for CVE-2023-2418?

The CWE ID for CVE-2023-2418 is 330.

How can I fix CVE-2023-2418?

There is no specific fix available yet for CVE-2023-2418. It is recommended to follow the official advisory and monitor for any updates or patches from the vendor.

Where can I find more information about CVE-2023-2418?

You can find more information about CVE-2023-2418 in the following references: [GitHub Advisory](https://github.com/advisories/GHSA-9g4c-xm3g-f8hq), [VulDB](https://vuldb.com/?ctiid.227715), [VulDB](https://vuldb.com/?id.227715).

Vulnerability/
CVE-2023-2418

medium

5.9

CWE

330

29/4/2023

2/8/2024

CVE-2023-2418: Konga Login API random values

First published: Sat Apr 29 2023(Updated: )

A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The associated identifier of this vulnerability is VDB-227715.

Credit: cna@vuldb.com cna@vuldb.com

Affected Software	Affected Version	How to fix
Konghq Kong	=2.8.3
	=2.8.3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2023-2418?
The severity of CVE-2023-2418 is medium.
What is the affected software for CVE-2023-2418?
The affected software for CVE-2023-2418 is Kong 2.8.3.
What is the CWE ID for CVE-2023-2418?
The CWE ID for CVE-2023-2418 is 330.
How can I fix CVE-2023-2418?
There is no specific fix available yet for CVE-2023-2418. It is recommended to follow the official advisory and monitor for any updates or patches from the vendor.
Where can I find more information about CVE-2023-2418?
You can find more information about CVE-2023-2418 in the following references: [GitHub Advisory](https://github.com/advisories/GHSA-9g4c-xm3g-f8hq), [VulDB](https://vuldb.com/?ctiid.227715), [VulDB](https://vuldb.com/?id.227715).

collector/nvd-index
agent/references
agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/author
agent/severity
agent/last-modified-date
agent/weakness
agent/title
agent/softwarecombine
agent/tags
agent/description
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/konghq
canonical/konghq kong
version/konghq kong/2.8.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.