CVE-2024-52269highobserved exploitationCWE-451

CVE-2024-52269: high-severity vulnerability in DocuSign

AI Assistant PDF Document Spoofing in DocuSign

Published · Updated

Follow this CVE+ Monitor DocuSign

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 8.2epss 0.3%
from disclosure to weapon
Published on NVDDec 4
VulnCheck+1d
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
Affected products
DocuSign · DocuSign
Related CVEs — DocuSign

In the same product, most dangerous first.

CVE-2024-52276HIGHPDF Document Spoofing in DocuSignEPSS 0.4%