Description
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Medium · 5.4
CVE-2023-43901
EUVD-2023-48261GHSA-cjm4-2f5j-r6xx
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify …
Published Nov 14, 2023 · Updated Aug 28, 2026 · Assigned by mitre