What is GHSA-r59x-8xcr-cc6w?

GHSA-r59x-8xcr-cc6w is a security advisory published by GitHub Security Advisories with Medium severity. Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized...

Which CVE IDs does GHSA-r59x-8xcr-cc6w cover?

GHSA-r59x-8xcr-cc6w covers the following CVE IDs: CVE-2023-43900. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r59x-8xcr-cc6w?

GHSA-r59x-8xcr-cc6w has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-r59x-8xcr-cc6wMediumCVSS 6.5

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized...

Vendor

GitHub Security Advisories

Published

November 14, 2023

Last Modified

August 28, 2026

🔗 CVE IDs covered (1)

CVE-2023-43900 →

📋 Description

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-43900
https://secpro.llc/emsigner-cve-3
https://secpro.co/blog/cve-2023-43900
https://github.com/advisories/GHSA-r59x-8xcr-cc6w