Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing.
The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user.
For reference see: CVE-2024-52276
This issue affects DocuSign: through 2024-12-04.

Classification

CVE ID: CVE-2024-52269

CVSS Base Severity: HIGH

CVSS Base Score: 8.2

Affected Products

Vendor: DocuSign

Product: DocuSign

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.48% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://www.vulsec.org/advisories
https://www.loom.com/share/65ce5423d2a04e0bbd2688a178d5427f

Timeline