2 matches found
CVE-2026-72548
An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant Parse cloud function. The function accepts a contactId parameter and returns the full tenant record without...
8.7CVSS5.8AI score0.00614EPSS
SaveExploits0References3
CVE-2026-72548: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant Parse cloud function. The function accepts a contactId parameter and returns the full tenant record without...
7.5CVSS5.9AI score0.00614EPSS
SaveExploits0References2
20