mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-02 03:41:53 +02:00
726 B
726 B
CVE-2023-26987
Description
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
POC
Reference
- https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw
- https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit
Github
No PoCs found on GitHub currently.