CVEvulnerability

CVE-2024-52269

8.2 HIGH Published 2024-12-04 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-12-04
Last modified
2026-06-17
Assigner
2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
CVSS 4.0 (2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe)
8.2 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-451

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04.

Related

Weakness · CWE (1)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness

References