Nbnbk Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nbnbk Project records in CISA KEV

No Nbnbk Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nbnbk 4 records MEDIUM

Records

4 records in Nbnbk · all components

TI-2022-22975 CVE-2022-46491 · GHSA-qjmp-r857-4762

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of…

MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00287 Published 2022-12-22 No fix listed CWE-352

TI-2022-22977 CVE-2022-46493 · GHSA-chpf-j4rw-9gw7

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability…

MEDIUM 50

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00848 Published 2022-12-22 No fix listed CWE-434

TI-2022-13366 CVE-2022-31386 · GHSA-23x2-p68q-c69p

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows…

MEDIUM 41

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01044 Published 2022-06-09 No fix listed CWE-918

TI-2022-22976 CVE-2022-46492 · GHSA-wr67-67pq-fp4r

nbnbk commit 8798584 was discovered to contain an…

LOW 29

nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0052 Published 2022-12-23 No fix listed CWE-22

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0