CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item"…

published April 7, 2020

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02206 · 82.4th percentile
Published
2020-04-07T14:31Z
EPSS history
Timeline
  • 07 APR 14:31Z
    In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item"…
    cvelistv5