Description
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.
Metrics
CVSS 3.1 9.4/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Tyler Technologies | Civil and Criminal Electronic Filing | 0 |
References
- https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.mdThird Party Advisory
- https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/Press/Media Coverage, Third Party Advisory
- https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systemsThird Party Advisory, US Government Resource
- https://www.tylertech.com/solutions/courts-public-safety/courts-justiceProduct
- https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.mdThird Party Advisory
- https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/Press/Media Coverage, Third Party Advisory
- https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systemsThird Party Advisory, US Government Resource
- https://www.tylertech.com/solutions/courts-public-safety/courts-justiceProduct
Timeline
- Published
- Nov 30, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified