Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-46491 EUVD-2022-49295GHSA-qjmp-r857-4762

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arb…

Published Dec 22, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.

References