<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: DocuSign</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-52269: User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofin</title><link>https://patchthecve.com/cve/CVE-2024-52269.html</link><guid>https://patchthecve.com/cve/CVE-2024-52269.html</guid><pubDate>Wed, 17 Jun 2026 08:06:54 +0000</pubDate><description>HIGH 8.1: User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing.
The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user.
For reference see: CVE-2024-52276
This issue affects DocuSign: through 2024-12-04.</description></item><item><title>CVE-2024-52276: User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofin</title><link>https://patchthecve.com/cve/CVE-2024-52276.html</link><guid>https://patchthecve.com/cve/CVE-2024-52276.html</guid><pubDate>Wed, 17 Jun 2026 08:06:55 +0000</pubDate><description>HIGH 7.5: User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing.
1. Displayed version does not show the layer flattened version, which is provided when the &quot;Print&quot; option is used.
2. Displayed version does not show the layer flattened version, which is</description></item><item><title>CVE-2024-39344: An issue was discovered in the Docusign API package 8.142.14 for Salesforce</title><link>https://patchthecve.com/cve/CVE-2024-39344.html</link><guid>https://patchthecve.com/cve/CVE-2024-39344.html</guid><pubDate>Wed, 17 Jun 2026 07:41:45 +0000</pubDate><description>HIGH 8.1: An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The Apttus_DocuApi__DocusignAuthentication__mdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when insta</description></item></channel></rss>