CVE-2024-52276

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-52276
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which is provided when the combined download option is used. 3. Displayed version does not show the layer flattened version, which is also the provided version when downloading the result in the uncombined option. Once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSign: through 2024-12-04.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://drive.proton.me/urls/QD7Z493XX4#Yn3eKAjuZA5m
https://new.space/s/3SG3wQxTSg7lq-vLzUjy-Q#mmrg4t0wMThwTqs9nogVHdLAjMFlkgFnKHn_Q8u9cCs
https://www.loom.com/share/65ce5423d2a04e0bbd2688a178d5427f
https://www.vulsec.org/advisories
Configurations

No configuration.

History

06 Jan 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

05 Dec 2024, 11:15

Type Values Removed Values Added
References
  • () https://drive.proton.me/urls/QD7Z493XX4#Yn3eKAjuZA5m -
  • () https://new.space/s/3SG3wQxTSg7lq-vLzUjy-Q#mmrg4t0wMThwTqs9nogVHdLAjMFlkgFnKHn_Q8u9cCs -
  • () https://www.loom.com/share/65ce5423d2a04e0bbd2688a178d5427f -
Summary
  • (es) ** LANZAMIENTO LIMITADO INICIAL ** La vulnerabilidad de tergiversación de información crítica en la interfaz de usuario (IU) en [WITHHELD] permite la suplantación de contenido. Este problema afecta a [WITHHELD]: hasta el 4 de diciembre de 2024.
Summary (en) ** INITIAL LIMITED RELEASE ** User Interface (UI) Misrepresentation of Critical Information vulnerability in [WITHHELD] allows Content Spoofing.This issue affects [WITHHELD]: through 2024-12-04. (en) User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which is provided when the combined download option is used. 3. Displayed version does not show the layer flattened version, which is also the provided version when downloading the result in the uncombined option. Once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DocuSign: through 2024-12-04.

04 Dec 2024, 11:30

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-04 11:30

Updated : 2025-01-06 18:15

NVD link : CVE-2024-52276

Mitre link : CVE-2024-52276

CVE.ORG link : CVE-2024-52276

JSON object : View

Products Affected

No product.

CWE
CWE-451

User Interface (UI) Misrepresentation of Critical Information