CVE-2023-26987: Medium severity kong vulnerability
Published May 1, 2023
·Updated
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
Affected Software
1 affected component
Konga Project Konga=0.14.9
Event History
May 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-26987?
CVE-2023-26987 is considered a critical vulnerability due to its ability to allow unauthorized manipulation of user accounts.
2
How do I fix CVE-2023-26987?
To fix CVE-2023-26987, upgrade Konga to a version later than 0.14.9 that addresses this vulnerability.
3
What impact does CVE-2023-26987 have on user accounts?
CVE-2023-26987 allows remote attackers to manipulate user accounts without requiring any privileges.
4
Is CVE-2023-26987 exploitable over the internet?
Yes, CVE-2023-26987 can be exploited by remote attackers over the internet through crafted POST requests.
5
What software versions are affected by CVE-2023-26987?
CVE-2023-26987 specifically affects Konga version 0.14.9.