We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DropBox Sign(HelloSign): through 2024-12-04.
Reserved 2024-11-06 | Published 2024-12-05 | Updated 2024-12-05 | Assigner VULSecCWE-451 User Interface (UI) Misrepresentation of Critical Information
Erez Kalman
www.vulsec.org/advisories
www.loom.com/...453?sid=816c6afa-0b67-4b0b-98ff-d5c58d464038
new.space/s/ZuHoujvkjdzfY7Uihah7Yg
drive.proton.me/urls/Z6DHXNRZQC
sign.dropbox.com/
app.hellosign.com/
Support options