CVE-2023-40362

2024-01-1200:00:00

mitre

www.cve.org

cve-2023-40362

centralsquare click2gov

access control

remote attack

user account deletion

AI Score

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user’s account when the user ID and contractor information is known.