CVE-2021-42192: Konga Project Konga

High severity, CVSS 8.8. EPSS: 10.1% chance of exploitation in the next 30 days.

Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.

Affected products

• Konga Project Konga: version 0.14.9 only

Published 2022-05-04. Last modified 2026-06-17.