CVE-2024-52271

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-52271
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52271.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-52271
Published
2024-12-05T13:56:08.185Z
Modified
2026-07-15T01:49:06.344047388Z
Severity
  • 8.2 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red CVSS Calculator
Summary
PDF Document Spoofing in Documenso
Details

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.

This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52271.json",
    "cna_assigner": "VULSec",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "2024-12-05"
                },
                {
                    "introduced": "2024-12-05"
                },
                {
                    "last_affected": "2024-12-05"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-451"
    ]
}
References

Affected packages

Git / github.com/documenso/documenso

Affected ranges

Type
GIT
Repo
https://github.com/documenso/documenso
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0eff336175f5c112a6e7c952c15f1e2a6a255e48
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.8.0"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

0.*
0.9-developer-preview
>1.*
>1.8.0
Other
before-prettier
v0.*
v0.9
v1.*
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.3.0
v1.3.0-rc.0
v1.3.0-rc.1
v1.3.0-rc.2
v1.3.1
v1.3.1-rc.0
v1.3.1-rc.1
v1.3.1-rc.2
v1.3.2-rc.0
v1.4.0
v1.4.0-rc.0
v1.5.0
v1.5.0-rc.0
v1.5.0-rc.1
v1.5.0-rc.2
v1.5.0-rc.3
v1.5.0-rc.4
v1.5.0-rc.5
v1.5.0-rc.6
v1.5.1
v1.5.1-rc.0
v1.5.2
v1.5.2-rc.0
v1.5.2-rc.1
v1.5.2-rc.2
v1.5.2-rc.3
v1.5.2-rc.4
v1.5.2-rc.5
v1.5.2-rc.6
v1.5.2-rc.7
v1.5.2-rc.8
v1.5.3
v1.5.3-rc.0
v1.5.3-rc.1
v1.5.4
v1.5.4-rc.0
v1.5.4-rc.1
v1.5.4-rc.2
v1.5.4-rc.3
v1.5.4-rc.4
v1.5.4-rc.5
v1.5.5
v1.5.5-rc.0
v1.5.5-rc.1
v1.5.5-rc.2
v1.5.5-rc.3
v1.5.5-rc.4
v1.5.5-rc.5
v1.5.5-rc.6
v1.5.5-rc.7
v1.5.5-rc.8
v1.5.6
v1.5.6-rc.0
v1.5.6-rc.1
v1.5.6-rc.2
v1.5.6-rc.3
v1.5.6-rc.4
v1.6.0
v1.6.0-rc.0
v1.6.0-rc.1
v1.6.0-rc.2
v1.6.0-rc.3
v1.6.1
v1.6.1-rc.0
v1.6.1-rc.1
v1.7.0
v1.7.0-rc.0
v1.7.0-rc.1
v1.7.0-rc.2
v1.7.0-rc.3
v1.7.0-rc.4
v1.7.0-rc.5
v1.7.1
v1.7.1-rc.0
v1.7.1-rc.1
v1.7.1-rc.2
v1.7.1-rc.3
v1.7.2
v1.7.2-rc.0
v1.7.2-rc.1
v1.7.2-rc.2
v1.7.2-rc.3
v1.7.2-rc.4
v1.8.0-rc.1
v1.8.0-rc.2
v1.8.0-rc.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52271.json"