CVE-2024-52271

N/A

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

CVE Details

CVSS v3.1 ScoreN/A

Published12/5/2024

Last Modified12/5/2024

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-451

References

https://github.com/documenso/documenso(2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe)

https://github.com/documenso/documenso/issues/1512(2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe)

https://www.documenso.com/(2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe)

https://www.vulsec.org/advisories(2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.