KONGA 漏洞列表
共找到 2 个与 KONGA 相关的漏洞
📅 加载漏洞趋势中...
-
konga-default-jwt-key: KONGA Arbitrary user login vulnerability POC
The default key of Konga JWT is oursecret, which can forge arbitrary user permissions FOFA: app="Konga-Api-Gateway" -
CVE-2021-42192: KONGA 0.14.9 - Privilege Escalation POC
KONGA 0.14.9 allows attackers to set higher privilege users to full administration access. The attack vector is a crafted condition, as demonstrated by the /api/user/{ID} at ADMIN parameter.