Threats tagged 'ghsa-x43r-25j9-cfc4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.6%	CVE-2026-92794OpenSignLabs OpenSign · Missing Authorization High8.7EPSS 0.6%2026-09-16CVE Database V5CVE-2026-92794 OpenSign versions up to 2.41.3 have a missing authorization check in the getDocument cloud function when one-time-password verification is disabled. This flaw allows attackers to retrieve full document details, including signer and sender information and valid download tokens, without authentication by using document identifiers from guest signing links. EPSS 0.6%Vulnerability #ghsa-x43r-25j9-cfc4	CVE Database V5	2026-09-16

Page 1 of 1