Skip to content
Threat Feed
Subscribe

Product

OpenSign (<= 2.41.3)

1 brief RSS
high advisory

Authentication Bypass in OpenSign getDocument Function

OpenSign versions through 2.41.3 contain an authentication bypass vulnerability allowing unauthenticated attackers to retrieve sensitive document data and download tokens when OTP verification is disabled.

OpenSign authentication-bypass cloud-security information-disclosure
2t 1c