Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r59x-8xcr-cc6w

Опубликовано: 14 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

EPSS

Процентиль: 42%
0.00195
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 лет назад

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

EPSS

Процентиль: 42%
0.00195
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639