CVE-2024-52277CWE-451

PDF Document Spoofing in DocuSeal

High · published December 4, 2024

CVSS v4.0
8.2
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.

This issue affects DocuSeal: through 1.8.1, >1.8.1.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2024-12-04T10:16Z
EPSS history
Timeline
  • 04 DEC 10:16Z
    PDF Document Spoofing in DocuSeal
    cvelistv5