Vendor
OpenSignLabs
10 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
OpenSignLabs OpenSign - Information Disclosure
An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authent…