Skip to content
OpenAdvisories

Product · OpenSignLabs

OpenSign

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    OpenSignLabs OpenSign - Information Disclosure

    An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authent…