Known Vulnerabilities for products from KongHQ
Listed below are 5 of the newest known vulnerabilities associated with the vendor "KongHQ".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-40299 json | Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permis... | 7.8 - HIGH | 2023-10-04 | 2023-10-12 |
| CVE-2023-2418 json | A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the ... | 5.9 - MEDIUM | 2023-04-29 | 2023-11-07 |
| CVE-2021-27306 json | An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users acce... | 7.5 - HIGH | 2021-03-18 | 2023-11-07 |
| CVE-2020-36661 json | A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the ... | 7.5 - HIGH | 2023-02-12 | 2023-11-16 |
| CVE-2020-11710 json | ** DISPUTED ** An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on inter... | 9.8 - CRITICAL | 2020-04-12 | 2023-11-07 |
Known software with vulnerabilities from KongHQ
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Konghq | Docker-kong | - |
| Application | Konghq | Kong Gateway | - |