CVE-2020-24771

HIGH

NexusPHP 1.5.beta5.20120707 - Incorrect Authorization

Title source: llm
STIX 2.1

Description

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.

References (3)

Core 3
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://nexusphp.org/2021/02/03/nexusphp-v1-6-0-beta2/
Third Party Advisory x_refsource_misc
https://cwe.mitre.org/data/definitions/306.html

Scores

CVSS v3 7.5
EPSS 0.0202
EPSS Percentile 78.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-863
Status published
Products (1)
nexusphp/nexusphp 1.5
Published Mar 30, 2022
Tracked Since Feb 18, 2026