Tyler Technologies Civil and Criminal Electronic Filing Upload.aspx allows authentication bypass
CVE-2023-6353

5.3MEDIUM

Key Information:

Vendor: Tyler Technologies
Status: Civil And Criminal Electronic Filing
Vendor: CVE Published:; 30 November 2023

🔔 Create Tyler Technologies Vulnerability Alert

What is CVE-2023-6353?

The Tyler Technologies Civil and Criminal Electronic Filing system features a vulnerability that permits unauthenticated attackers to interact with the system's Upload.aspx interface. By manipulating the 'enky' parameter, an attacker can upload, delete, and view sensitive files, effectively compromising the integrity and confidentiality of the court documents managed by the system. This vulnerability raises significant concerns for data security within judicial systems, as unauthorized access could lead to the exposure of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch