CVE-2024-52270: PDF Document Spoofing in DropBox Sign(HelloSign)
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects DropBox Sign(HelloSign): through 2024-12-04.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52270?
CVE-2024-52270 is classified as a high-severity vulnerability due to its potential for content spoofing in Dropbox Sign.
How do I fix CVE-2024-52270?
To mitigate CVE-2024-52270, ensure that you are using the latest version of Dropbox Sign, updated past December 4, 2024.
What type of vulnerability is CVE-2024-52270?
CVE-2024-52270 is a User Interface (UI) misrepresentation vulnerability that allows for content spoofing.
What impact does CVE-2024-52270 have on users?
Users may be misled by incorrect visual information displayed by Dropbox Sign, leading to trust issues in document authenticity.
Which software versions are affected by CVE-2024-52270?
CVE-2024-52270 affects Dropbox Sign versions up to and including 2024-12-04.