CVE-2021-42192

概要

参考情報

• docs.google.com/document/d/1-YU9zWiDVUps3Mb6zos3996yvZ48vW_vfOvaJLLHc4I/edit · Exploit
• pantsel/konga · Product
• pantsel/konga commit d615352
• whokilleddb/Konga-Privilege-Escalation-Exploit · Exploit
• exploit-db.com/exploits/50521 · Exploit

konga のその他の脆弱性

• CVE-2023-26987中 6.5An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.