CVE-2024-52269

AI Assistant PDF Document Spoofing in DocuSign

CVSS 8.2 HIGHEPSS 0.3%CWE-451

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red

Produtos afetados

DocuSign · DocuSign

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.loom.com/share/65ce5423d2a04e0bbd2688a178d5427f https://www.vulsec.org/advisories