CVEvulnerability
CVE-2023-43900
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-14
- Last modified
- 2026-08-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-639
Description
Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.
Affected configurations
• emudhra emsigner 2.8.7
Related
Weakness · CWE (1)
- CWE-639 Authorization Bypass Through User-Controlled Key weakness
References
- https://secpro.co/blog/cve-2023-43900 secpro.co
- https://secpro.llc/emsigner-cve-3/ Exploit, Third Party Advisory
- https://secpro.llc/emsigner-cve-3/ Exploit, Third Party Advisory