CVE-2023-43900CWE-639

CVE-2023-43900

Medium · published November 14, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00598 · 47.9th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2023-11-14T10:15Z
Affected products (1)
ProductVersionsFixed in
emudhra/emsignerall versions—
References (3)
https://secpro.co/blog/cve-2023-43900 · [email protected]https://secpro.llc/emsigner-cve-3/ · [email protected]https://secpro.llc/emsigner-cve-3/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 NOV 00:00Z
    Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other…
    cvelistv5