Vulnerability Details CVE-2023-43901
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 39.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-43901
-
cpe:2.3:a:emudhra:emsigner:2.8.7