CVE-2023-6341

Publication date

2023-11-30 17:41:22

Family

cisa-cg

State

PUBLISHED

Description

Catalis (previously Icon Software) CMS360 allows a remote, unauthenticated attacker to view sensitive court documents by modifying document and other identifiers in URLs. The impact varies based on the intention and configuration of a specific CMS360 installation.