CVE-2023-6354 MEDIUM

CVE-2023-6354: Tyler Technologies Magistrate Court Case Management Plus PDFViewer.aspx allows authentication bypass

Vendor Tyler Technologies
Product Magistrate Court Case Management Plus
Weakness CWE-287 · Improper authentication
Published November 30, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.

Key dates

02Disclosure timeline

November 30, 2023 CVE published
August 2, 2024 Record updated