CVE-2022-46074

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 40th percentile

Published

2022-12-14

Updated

2025-04-22

Proof-of-concept exploits (2)

• https://www.youtube.com/watch?v=5Q3vyTo02bc&ab_channel=IkariShinji
• https://yuyudhn.github.io/CVE-2022-46074/

References

• CVE Record
• NVD entry

Related

• CVE-2022-46073
• CVE-2022-46076
• CVE-2022-46072
• CVE-2022-46080
• CVE-2022-46071
• CVE-2022-46087