CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-43901
Severity
MEDIUM
CVSS
5.9
EPSS
0.46%
Original NVD Description
Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Related CVEs
Other vulnerabilities affecting the same vendor(s)