Exploitation Summary
CVE-2024-52269 has been observed exploited in the wild (reported by VulnCheck KEV).
Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04.
References (2)
Core 2
Core References
Various Sources vdb-entry
https://www.vulsec.org/advisories
Various Sources exploit
https://www.loom.com/share/65ce5423d2a04e0bbd2688a178d5427f
Scores
CVSS v3
8.1
EPSS
0.0027
EPSS Percentile
19.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
VulnCheck KEV
2024-12-05
CWE
CWE-451
Status
published
Products (1)
DocuSign/DocuSign
< 2024-12-04
Published
Dec 04, 2024
Tracked Since
Feb 18, 2026