CVE-2023-43901

EMSigner v2.8.7 , an electronic signature solution from EMSigner India, is affected by an incorrect access control flaw in its AdHoc User creation form . An unauthenticated attacker can arbitrarily modify usernames and privileges of a registered user by supplying that user's email address. The fl...