CVE-2022-23904

PoC —

CVSS 3.1

8.0 high

EPSS

<1%p38

Published

May 2, 2022 (May 2, 2022)

Modified

Jun 17, 2026

Description

Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel. This vulnerability affects AuctionWorx Enterprise and AuctionWorx: Events Edition.

Vendors: rainworx
Products: auctionworx
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.