Vulnerability in Documenso
CVE-2024-52271
User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (10.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 10th percentile — 10.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Documenso — versions 0, >1.8.0
- Documenso Saas (Hosted) — versions 0, 2024-12-05
Weakness classification (CWE)
References
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (vdb-entry)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (product)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (product)
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (issue-tracking)