VulnerabilityDeferred
CVE-2024-52269
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing.
HIGH 8.2EPSS 0.28%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04.
- CVSS 4.0
- 8.2 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.28% probability · 20th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-451
- Source
- 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.