1. Home
  2. CVE Database
  3. CVE-2024-27292
HIGH · 7.5

CVE-2024-27292

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It af...

Vulnerability Description

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
JhpyleDocassemble>= 1.4.53, < 1.4.97

Related Weaknesses (CWE)

CWE-706

References

FAQ

What is CVE-2024-27292?

CVE-2024-27292 is a vulnerability with a CVSS score of 7.5 (HIGH). Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It af...

How severe is CVE-2024-27292?

CVE-2024-27292 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-27292?

Check the references section above for vendor advisories and patch information. Affected products include: Jhpyle Docassemble.