CVE-2024-52277

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSeal: through 1.8.1, >1.8.1.

Score

CVSS 4.0 8.2 High

Status

Deferred - 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe

Published

2024-12-04

Last modified

2024-12-05

Weaknesses

CWE-451

Affected products

• Docuseal (Docuseal)

References

• https://docuseal.com/
• https://docuseal.eu/
• https://github.com/docusealco/docuseal
• https://www.vulsec.org/advisories