CVE-2024-52277 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSeal: through 1.8.1, >1.8.1.

Reserved 2024-11-06 | Published 2024-12-04 | Updated 2024-12-05 | Assigner VULSec

HIGH: 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red

Problem types

CWE-451 User Interface (UI) Misrepresentation of Critical Information

Product status

Default status

affected

Any version

affected

>1.8.1

affected

Credits

Erez Kalman finder

References

www.vulsec.org/advisories vdb-entry

github.com/docusealco/docuseal product

docuseal.com/ product

docuseal.eu/ product

cve.org (CVE-2024-52277)

nvd.nist.gov (CVE-2024-52277)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-52277

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.