Security Advisory

CVE-2023-40362

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-12 00:00:00

Last updated 2025-06-20 16:37:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known.

← Browse all CVEs View on cve.org ↗