CVE-2024-27292

—

CVSS 3.1

7.5 high

EPSS

69%p99

Published

Mar 21, 2024 (Mar 21, 2024)

Modified

Jun 17, 2026

Description

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.

Vendors: jhpyle
Products: docassemble
Weakness: CWE-706
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (69.5%)

In the news0 stories

No ingested article mentions this CVE yet.