Vulnerability in Documenso
CVE-2024-52271
User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.
EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.
Affected products
- Documenso — versions 0, >1.8.0
- Documenso Saas (Hosted) — versions 0, 2024-12-05
Weakness classification (CWE)
References
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (vdb-entry)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (product)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (product)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (issue-tracking)