← Back to CVE List

CVE-2023-43902

Published: 2023-11-14T05:15Z
Last Modified: 2025-01-08T17:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt