2023-05-01 00:00:00
mitre
PUBLISHED
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.