Advisories · Technology
Outline.
Every CVE that names Outline among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft
- Outline
- Broken access control
- CVSS 6.9 Medium
Outline before 1.12.0 Improper Access Control via Public Document Shares
- Outline
- CWE-672
- CVSS 6.9 Medium
Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions
- outline
- Broken access control
- CVSS 5.3 Medium
Authorization Bypass in API Key/OAuth Scopes via Path Parsing Discrepancy
- outline
- Broken access control
- CVSS 5.8 Medium
Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity
- outline
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
Outline: Unauthorized Document Publication via Mixed collectionId+documentId Share
- outline
- Broken access control
- CVSS 8.7 High
Outline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import
- outline
- Path traversal
- CVSS 7.7 High
Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7)
- outline
- Broken access control
- CVSS 8.2 High
Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access
- outline
- Privilege escalation
- CVSS 7.3 High
Outline: Stored XSS via Comment Mentions
- outline
- Cross-site scripting (XSS)
- CVSS 7.7 High
Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces
- outline
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Outline has a rate limit bypass that allows brute force of email login OTP
- outline
- Authentication bypass
- CVSS 4.3 Medium
Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts
- outline
- Information disclosure
- CVSS 8.1 High
Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
- outline
- Broken access control
- CVSS 6.9 Medium
Outline has a suspended user authentication bypass via WebSocket connections
- outline
- Authentication bypass
- CVSS 7.6 High
Outline is vulnerable to privilege escalation vulnerability in document sharing
- outline
- Privilege escalation
- CVSS 5.5 Medium
Outline Affected an Arbitrary File Read via Path Traversal in JSON Import
- outline
- Path traversal
- CVSS 8.5 High
Outline 1.6.0 - Unquoted Service Path
- Outline
- CWE-428
- CVSS 6.8 Medium
Outline's Local File Storage Feature can Cause CSP Bypass
- outline
- Cross-site scripting (XSS)
- CVSS 7.3 High
Stored Cross-site Scripting (XSS) vulnerability in Outline editor
- outline
- Cross-site scripting (XSS)