CVE-2023-6353

Medienbericht

EPSS 1.21%
Veröffentlicht 30.11.2023 18:15:09
Zuletzt bearbeitet 21.11.2024 08:43:41
Quelle 9119a7d8-5eab-497f-8521-727c67
CVE-Watchlists
Login
Unerledigt
Login

Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tylertech ≫ Court Case Management Plus Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.21%	0.784

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.4	3.9	5.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
9119a7d8-5eab-497f-8521-727c672e3725	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/

Third Party Advisory

Press/Media Coverage

https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems

Third Party Advisory

US Government Resource

https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md

Third Party Advisory

https://www.tylertech.com/solutions/courts-public-safety/courts-justice

Product

https://nvd.nist.gov/vuln/detail/CVE-2023-6353

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-6353

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-6353

EUVD