medium4.3
CVE-2023-40362
An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023.
Impact
An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centralsquare | Click2gov Building Permit | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ally-petitt/CVE-2023-40362
- https://www.classaction.org/news/centralsquare-hit-with-class-action-over-2017-2018-click2gov-data-breach
- https://github.com/ally-petitt/CVE-2023-40362
- https://www.classaction.org/news/centralsquare-hit-with-class-action-over-2017-2018-click2gov-data-breach