CVE-2024-52269CWE-451

AI Assistant PDF Document Spoofing in DocuSign

High · published December 4, 2024

CVSS v4.0
8.2
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing.

The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user.

For reference see: CVE-2024-52276

This issue affects DocuSign: through 2024-12-04.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2024-12-04T11:25Z
EPSS history
Timeline
  • 04 DEC 11:25Z
    AI Assistant PDF Document Spoofing in DocuSign
    cvelistv5