Vulnerability CVE-2023-26987
Published: 2023-05-01   Modified: 2023-05-02

Description:
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.

 References:
https://github.com/redteambrasil/nuclei-templates
https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw
https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit
Copyright 2026, cxsecurity.com

 

Back to Top