CVE-2023-43901 Information

Description

Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.

Reference

https://secpro.llc/EMSigner-CVE-1/