CVE-2022-46491: Nbnbk Project Nbnbk

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.

Affected products

• Nbnbk Project Nbnbk: affected versions not specified

Published 2022-12-22. Last modified 2026-06-17.