CVE-2022-46491

CVE-2022-46491 describes a Cross-Site Request Forgery (CSRF) vulnerability in the nbnbk_project nbnbk application, specifically within its "Add Administrator" function. This medium-severity vulnerability (CVSS 6.5) allows an unauthenticated attacker to create arbitrary administrator accounts by tricking an authenticated user into clicking a malicious link. While there is no evidence of active exploitation, nor publicly available exploit code, the potential impact is high due to the ability to gain administrative control over the affected system.