CVE-2023-6342: Tylertech Court Case Management Plus

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01.

Affected products

• Tylertech Court Case Management Plus: affected versions not specified

Published 2023-11-30. Last modified 2026-06-17.