CVE-2024-52276highobserved exploitationCWE-451

CVE-2024-52276: high-severity vulnerability in DocuSign

PDF Document Spoofing in DocuSign

Published · Updated

Follow this CVE+ Monitor DocuSign

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 8.2epss 0.4%
from disclosure to weapon
Published on NVDDec 4
VulnCheck+1d
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which is provided when the combined download option is used. 3. Displayed version does not show the layer flattened version, which is also the provided version when downloading the result in the uncombined option. Once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSign: through 2024-12-04.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red
Affected products
DocuSign · DocuSign
Related CVEs — DocuSign

In the same product, most dangerous first.

CVE-2024-52269HIGHAI Assistant PDF Document Spoofing in DocuSignEPSS 0.3%