Home

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSeal: through 1.8.1, >1.8.1.

PUBLISHED Reserved 2024-11-06 | Published 2024-12-04 | Updated 2024-12-05 | Assigner VULSec




HIGH: 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red

Problem types

CWE-451 User Interface (UI) Misrepresentation of Critical Information

Product status

Default status
affected

Any version
affected

>1.8.1 (git)
affected

Credits

Erez Kalman finder

References

www.vulsec.org/advisories vdb-entry

github.com/docusealco/docuseal product

docuseal.com/ product

docuseal.eu/ product

cve.org (CVE-2024-52277)

nvd.nist.gov (CVE-2024-52277)

Download JSON