Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Konghq Subscribe
Filtered by product Kong Gateway
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27306 1 Konghq 1 Kong Gateway 2022-07-12 4.3 MEDIUM 7.5 HIGH
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.