CVE-2022-46493

CRITICAL CVSS: 9.8 Published: 2022-12-22 Modified: 2026-06-17

Description

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

Affected Platforms

Nbnbk Project Nbnbk

Weakness Type

CWE-434, CWE-434

References