CVE-2024-52271CWE-451

PDF Document Spoofing in Documenso

High · published December 5, 2024

CVSS v4.0
8.2
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.

This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2024-12-05T13:56Z
EPSS history
Timeline
  • 05 DEC 13:56Z
    PDF Document Spoofing in Documenso
    cvelistv5