Lucene search
K

8 matches found

OSV
OSV
added 2025/01/17 6:15 a.m.1 views

CVE-2024-11146

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

6.3CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/01/17 6:15 a.m.6 views

CVE-2024-11146

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

6.3CVSS0.00091EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/17 5:21 a.m.11 views

CVE-2024-11146 TrueFiling authorization bypass via user-controlled keys

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

6.3CVSS0.00091EPSS
Exploits0References2
CVE
CVE
added 2025/01/17 5:21 a.m.46 views

CVE-2024-11146

TrueFiling (cloud-hosted filing system) prior to version 3.1.112.19 trusts client-controlled identifiers passed in URLs, enabling authenticated users to manipulate identifiers to gain partial access to case information and to partially change user access. The issue is a user-controlled authorizat...

6.3CVSS7AI score0.00091EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/17 5:21 a.m.2 views

CVE-2024-11146 TrueFiling authorization bypass via user-controlled keys

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

6.3CVSS7AI score0.00091EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.2 views

TrueFiling 安全漏洞

TrueFiling is a Web-based electronic filing system from TrueFiling, Inc. A security vulnerability exists in versions prior to TrueFiling 3.1.112.19 that stems from a vulnerability that allows a user to gain partial access to case information and the ability to change a user's access to case...

6.3CVSS6.4AI score0.00091EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.1 views

PT-2025-1626 · Unknown · Truefiling

Name of the Vulnerable Software and Affected Versions: TrueFiling versions prior to 3.1.112.19 Description: TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters, and self-represented filers collect public legal documentation into cases. Th...

6.3CVSS6.8AI score0.00091EPSS
Exploits0References9
ICS
ICS
added 2025/01/16 12:0 a.m.3 views

TrueFiling authorization bypass via user-controlled keys

RISK EVALUATION TrueFiling trusts some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to...

6.3CVSS6.6AI score0.00091EPSS
Exploits0References1
Rows per page
Query Builder