← Back to browse · API

CVE-2024-27292

Severity
HIGH
CVSS
7.5
EPSS
0.69486
Risk score
54.32
CISA KEV
No
PoC
No
Published
2024-02-29
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2024-0665, GHSA-JQ57-3W7P-VWVV, PYSEC-2026-1309, PYSEC-2026-2453
Products
jhpyle:docassemble, jhpyle:docassemble 1.4.53, < 1.4.97
Sources
euvd EUVD-2024-0665

Description

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.

References