Lucene search
Nbnbk ProjectNbnbk
2 matches found
CVE-2022-31386
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
9.1CVSS9.3AI score0.00212EPSS
CVE-2022-46493
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.
9.8CVSS9.5AI score0.00091EPSS