CVE-2023-40362

Summary

CVE-2023-40362 is a vulnerability affecting CentralSquare Click2Gov Building Permit before October 2023. This issue involves insufficient access controls, enabling remote attackers to delete contractors from any user's account, provided they have the user ID and contractor information. The lack of proper authentication and authorization checks could potentially lead to unintended modifications and data loss. This vulnerability poses a significant risk to users, necessitating prompt patching or mitigation measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.