CVE-2023-43901

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p39

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Aug 28, 2026

Description

Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.

Vendors: emudhra
Products: emsigner
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.