← voltar
CVE-2024-52276

PDF Document Spoofing in DocuSign

CVSS 8.2 HIGHEPSS 0.3%CWE-451
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.2EPSS 0.3%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
04 dez 2024Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which is provided when the combined download option is used. 3. Displayed version does not show the layer flattened version, which is also the provided version when downloading the result in the uncombined option. Once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSign: through 2024-12-04.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
Produtos afetados
DocuSign · DocuSign

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →