CVE-2020-13474: Medium severity nch software express accounts vulnerability
In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-13474?
CVE-2020-13474 is a vulnerability in NCH Express Accounts 8.24 and earlier that allows an authenticated low-privilege user to access higher-privileged functionalities.
How does CVE-2020-13474 affect NCH Express Accounts?
CVE-2020-13474 allows an authenticated low-privilege user to enter a crafted URL and gain access to higher-privileged functionalities.
What is the severity of CVE-2020-13474?
The severity of CVE-2020-13474 is medium with a CVSS score of 6.5.
How can an attacker exploit CVE-2020-13474?
An attacker can exploit CVE-2020-13474 by being an authenticated low-privilege user and entering a crafted URL to gain access to higher-privileged functionalities.
Is there a fix for CVE-2020-13474?
Yes, upgrading to version 8.25 or later of NCH Express Accounts will fix CVE-2020-13474.