Catalis (previously Icon Software) CMS360 allows a remote, unauthenticated attacker to view sensitive court documents by modifying document and other identifiers in URLs.
CVSS 3.1MEDIUM 5.3·Network·No auth·No interaction·EPSS 0.00862·Published 2023-11-30·Fixed in ~2023-11-03CWE-639