CVE-2023-43902

CVE-2023-43902 affects EMSigner v2.8.7. The issue is an access-control failure in the Forgot Your Password feature that allows an unauthenticated attacker to access accounts of all registered users, including admin accounts, via a crafted password reset token. Documented CVSS v3.1 base score is 9...

CVE-2023-43901

EMSigner v2.8.7 , an electronic signature solution from EMSigner India, is affected by an incorrect access control flaw in its AdHoc User creation form . An unauthenticated attacker can arbitrarily modify usernames and privileges of a registered user by supplying that user's email address. The fl...

CVE-2023-43900

CVE-2023-43900 affects EMSigner v2.8.7 with an insecure direct object reference (IDOR) vulnerability. The issue allows an attacker to gain unauthorized access to application content and view sensitive data of other users by manipulating the documentID and EncryptedDocumentId parameters. The provi...