cve/2023/CVE-2023-6376.md

### [CVE-2023-6376](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6376)
![](https://img.shields.io/static/v1?label=Product&message=court%20document%20management%20software&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20~2023-11-22%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-330%20Use%20of%20Insufficiently%20Random%20Values&color=brighgreen)

### Description

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents.

### POC

#### Reference
- https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/
- https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/

#### Github
- https://github.com/qwell/disorder-in-the-court