Lucene search
HistoryDec 14, 2022 - 5:15 p.m.
CVE-2022-46074
helmet store showroom
csrf
vulnerability
unauthenticated user
admin account
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.
Affected configurations
Node
helmet_store_showroom_projecthelmet_store_showroomMatch1.0
Related
prion
prion
Cross site request forgery (csrf)
2022-12-14 17:15:00
cvelist
cvelist
CVE-2022-46074
2022-12-14 00:00:00
cve
cve
CVE-2022-46074
2022-12-14 17:15:11
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
Related for NVD:CVE-2022-46074