PDF Document Spoofing in DropBox Sign(HelloSign)
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 8.2epss 0.2%
da publicação à arma
Publicada no NVD5 de dez.
VulnCheck5 de dez.
probabilidade de exploração
0.2%top 91% das CVEs
exploração observada
simVulnCheck
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing.
Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.
This issue affects DropBox Sign(HelloSign): through 2024-12-04.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/AU:Y/U:Red
Produtos afetados
DropBox(HelloSign) · DropBox SignReferências
https://app.hellosign.com/https://drive.proton.me/urls/Z6DHXNRZQC#jkfO38rjOiOjhttps://new.space/s/ZuHoujvkjdzfY7Uihah7Yg#SKWLU_g2Cihfj4qsq9XNy6F4saxVAzD876PujiDOYfshttps://sign.dropbox.com/https://www.loom.com/share/48f63594e14c49e19840ad9cb7d60453?sid=816c6afa-0b67-4b0b-98ff-d5c58d464038https://www.vulsec.org/advisories