CVE-2024-52271

8.2 highEPSS 0.2%

High (8.2). EPSS 0.2% chance of exploitation in the next 30 days.

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/U:Red

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-451
Published: 2024-12-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/documenso/documenso
https://github.com/documenso/documenso/issues/1512
https://www.documenso.com/
https://www.vulsec.org/advisories

Check your stack JSON