CVE-2023-43901

7.5 highEPSS 0.5%

High (7.5) in emudhra emsigner. EPSS 0.5% chance of exploitation in the next 30 days.

Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-11-14
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

Affected

emudhra:emsigner

References

https://secpro.co/blog/cve-2023-43901
https://secpro.llc/EMSigner-CVE-1/
https://secpro.llc/EMSigner-CVE-1/

Check your stack JSON