CVE-2020-11561: High severity nch software express invoice vulnerability
Published Apr 7, 2020
·Updated
In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.
Affected Software
1 affected component
Nchsoftware Express Invoice=7.25
Event History
Apr 7, 2020
CVE Published
via MITRE·02:31 PM
Data Sourced
via MITRE·02:31 PM
Description
Frequently Asked Questions
1
What is CVE-2020-11561?
CVE-2020-11561 is a vulnerability in NCH Express Invoice 7.25 that allows an authenticated low-privilege user to access higher-privileged functionalities.
2
How does CVE-2020-11561 affect NCH Express Invoice?
CVE-2020-11561 allows a low-privilege user to enter a crafted URL and access higher-privileged functionalities, such as the "Add New Item" screen.
3
What is the severity of CVE-2020-11561?
CVE-2020-11561 has a severity rating of 8.8, which is considered high.
4
Is there a fix available for CVE-2020-11561?
Currently, there is no information available regarding a fix for CVE-2020-11561.
5
What is the CWE ID for CVE-2020-11561?
The CWE ID for CVE-2020-11561 is 425.