CVE-2024-27291

Summary

CVE-2024-27291 is a vulnerability affecting Docassemble, an expert system for guided interviews and document assembly. Before version 1.4.97, Docassemble was susceptible to open redirects, allowing attackers to manipulate URLs and potentially redirect users to malicious sites. This issue has been rectified in the latest master branch update, version 1.4.97.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.