← volver
CVE-2024-52270highexplotación observadaCWE-451

PDF Document Spoofing in DropBox Sign(HelloSign)

43Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Actcvss 8.2epss 0.2%
de la publicación al arma
Publicada en NVD5 dic
VulnCheck5 dic
probabilidad de explotación
0.2%top 91% de las CVE
explotación observada
síVulnCheck
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DropBox Sign(HelloSign): through 2024-12-04.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/AU:Y/U:Red
Productos afectados
DropBox(HelloSign) · DropBox Sign
Referencias
https://app.hellosign.com/https://drive.proton.me/urls/Z6DHXNRZQC#jkfO38rjOiOjhttps://new.space/s/ZuHoujvkjdzfY7Uihah7Yg#SKWLU_g2Cihfj4qsq9XNy6F4saxVAzD876PujiDOYfshttps://sign.dropbox.com/https://www.loom.com/share/48f63594e14c49e19840ad9cb7d60453?sid=816c6afa-0b67-4b0b-98ff-d5c58d464038https://www.vulsec.org/advisories