PT-2022-8695 · Nexusphp · Nexusphp

Published 2022-03-30 · Updated 2022-11-07 · CVE-2020-24771

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707

Description The issue is related to incorrect access control, allowing unauthorized attackers to access published content.

Recommendations For NexusPHP version 1.5.beta5.20120707, consider restricting access to published content until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-24771

Affected Products

Nexusphp

References · 6

• 🔥 https://github.com/burpheart/CVE/blob/master/2020-08-13-03.md · Exploit
• https://nexusphp.org/2021/02/03/nexusphp-v1-6-0-beta2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24771 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24771 · Vendor Advisory
• https://cwe.mitre.org/data/definitions/306.html · Note
• https://t.me/cibsecurity/39783 · Telegram Post