Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.
This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Documenso | Documenso | — | — |
| Documenso | Documenso SaaS (Hosted) | ≤ 2024-12-05, 2024-12-05 | — |
References
- https://www.vulsec.org/advisories vdb-entry
- https://github.com/documenso/documenso product
- https://www.documenso.com/ product
- https://github.com/documenso/documenso/issues/1512 issue-tracking