CyberRota Analysis
AI-GeneratedOpenSignLabs opensignserver versions prior to 2.37.0 are vulnerable to an authentication bypass, enabling unauthenticated remote attackers to generate MASTER_KEY-signed file access tokens for any stored file. This flaw arises from the getsignedurl Parse cloud function, which neglects to perform authentication checks when a docId parameter is provided, regardless of its validity. Organizations utilizing this software should prioritize patching to mitigate the risk of unauthorized access to sensitive files.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever any docId parameter is supplied, even one corresponding to no real document, allowing the authentication gate to be bypassed by supplying an arbitrary string as docId.