cve/2024/CVE-2024-52271.md
2025-09-29 21:09:30 +02:00

22 lines
1.3 KiB
Markdown

### [CVE-2024-52271](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52271)
![](https://img.shields.io/static/v1?label=Product&message=Documenso%20SaaS%20(Hosted)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Documenso&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3E1.8.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=1.8.0*%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=2024-12-05%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-451%20User%20Interface%20(UI)%20Misrepresentation%20of%20Critical%20Information&color=brightgreen)
### Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.
### POC
#### Reference
- https://github.com/documenso/documenso/issues/1512
#### Github
No PoCs found on GitHub currently.