← Database

CVE-2022-46491

MEDIUM CVSS: 6.5 Published: 2022-12-22 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.

Affected Platforms

Nbnbk Project Nbnbk

Weakness Type

CWE-352, CWE-352

References