CVE Catalog
CVE-2023-39846
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.90%
55th percentile - higher than 55% of all known CVEs
Summary
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data breaches or other serious security incidents.
Recommendation
It is recommended to update Konga to the latest version to mitigate this vulnerability.
Original NVD description (English source)
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.