Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.

This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

Classification

CVE ID: CVE-2024-52271

CVSS Base Severity: HIGH

CVSS Base Score: 8.2

Affected Products

Vendor: Documenso

Product: Documenso

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 17.81% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://www.vulsec.org/advisories
https://github.com/documenso/documenso
https://www.documenso.com/
https://github.com/documenso/documenso/issues/1512

Timeline