CVE-2023-26987 (published 2023-05-01T00:00:00)
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a