CyberRota Analysis
AI-GeneratedOpenSignLabs' opensignserver versions up to 2.37.0 are vulnerable due to a broken object-level authorization flaw that allows unauthenticated remote attackers to access complete contract records through the getDocument Parse cloud function. This vulnerability can expose sensitive personal information, including PII of senders and signers, as well as pre-signed document download URLs, particularly when the IsEnableOTP flag is left unset, which is the default setting. Organizations using this software should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and returns full records including sender and signer PII and a pre-signed document download URL whenever the document's IsEnableOTP flag is unset, which is the default configuration.