CVE-2025-4762

Insecure Direct Object Reference (IDOR) vulnerability in eSignaViewer

State: Published
Severity: 2.0 Low
Published: May 15, 2025
Updated: May 15, 2025
Reserved: May 15, 2025

Description

Insecure Direct Object Reference (IDOR) vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.

Scores

CVSS	Score	Vector	Source
4.0	2.0 Low	CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N	Edgewatch

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
eSignaLleidanet PKI	1.3.2Not affected 1.4.4Not affected 4.0.4Not affected 4.1.4Not affected 5.0.2Not affected 5.1.2Not affected 5.2.4Not affected 5.3.3Not affected 5.4.1Not affected

References

https://edgewatch.com/vulnerability-advisories/path-traversal-and-idor-vulnerabilities-in-esignaviewer-allow-unauthorized-file-access/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.