CyberRota Analysis
AI-GeneratedThe vulnerability allows recipients with the ASSISTANT role in Documenso's document-signing UI to manipulate and complete signature fields belonging to other recipients in a sequential-signing process, without proper authorization checks. This could lead to unauthorized signature forgery, compromising the integrity of signed documents. Organizations using this document-signing solution should prioritize addressing this issue to prevent potential fraud and maintain compliance.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal-order, not-yet-signed recipient in the same envelope, with no restriction on field type. A newer V2 signing path (sign-envelope-field.ts) explicitly blocks assistants from completing SIGNATURE fields, and the project's own test suite comments confirm this guard is absent from the V1 path used here.