CVE-2023-6354

Medienbericht

EPSS 1.04%
Veröffentlicht 30.11.2023 18:15:09
Zuletzt bearbeitet 21.11.2024 08:43:41
Quelle 9119a7d8-5eab-497f-8521-727c67
CVE-Watchlists
Login
Unerledigt
Login

Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tylertech ≫ Court Case Management Plus Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.04%	0.768

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.4	3.9	5.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
9119a7d8-5eab-497f-8521-727c672e3725	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/

Third Party Advisory

Press/Media Coverage

https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems

Third Party Advisory

US Government Resource

https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md

Third Party Advisory

https://www.tylertech.com/solutions/courts-public-safety/courts-justice

Product

https://nvd.nist.gov/vuln/detail/CVE-2023-6354

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-6354

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-6354

EUVD