CyberSecBulletin

eMudhra vulnerabilities

We track 2 vulnerabilities in eMudhra products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest eMudhra vulnerabilities

  • 9.8 Critical severity

    Emsigner: Weak Password Recovery Mechanism for Forgotten Password

    CVE-2023-43902eMudhra

    Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token.

  • 7.5 High severity

    Emsigner: Incorrect Authorization

    CVE-2023-43901eMudhra

    Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.