CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-43902
Severity
CRITICAL
CVSS
9.8
EPSS
0.86%
Original NVD Description
Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token.
Related CVEs
Other vulnerabilities affecting the same vendor(s)