Skip to content
OpenAdvisories

Vendor

documenso

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf

    Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or …

  • High 8.2

    PDF Document Spoofing in Documenso

    User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will…