Getoutline records
15 published records for vendor getoutline.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-269 Improper Privilege Management1
- CWE-287 Improper Authentication1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
15 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-33640No exploit | Outline has a rate limit bypass that allows brute force of email login OTPgetoutline · outline · CWE-307 | Critical9.1 | — | 0.4% | Mar 26, 2026 |
35Monitor | CVE-2024-37829No exploit | An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in linkgetoutline · outline · CWE-384 | High8.8 | — | 0.7% | Jul 9, 2024 |
35Monitor | CVE-2026-24901No exploit | Outline's IDOR allows unauthorized viewing and seizing of private deleted draftsgetoutline · outline · CWE-639 | High8.8 | — | 0.3% | Mar 17, 2026 |
34Monitor | CVE-2023-54331No exploit | Outline 1.6.0 - Unquoted Service Pathgetoutline · outline · CWE-428 | High8.5 | — | 0.2% | Jan 13, 2026 |
30Monitor | CVE-2026-41649No exploit | Outline has IDOR in document share creation that allows unauthorized access to private documents across workspacesgetoutline · outline · CWE-639 | High7.7 | — | 0.2% | Apr 28, 2026 |
30Monitor | CVE-2025-64487No exploit | Outline is vulnerable to privilege escalation vulnerability in document sharinggetoutline · outline · CWE-269 | High7.6 | — | 0.2% | Feb 11, 2026 |
27Monitor | CVE-2025-58351No exploit | Outline's Local File Storage Feature can Cause CSP Bypassgetoutline · outline · CWE-79 | Medium6.8 | — | 0.3% | Sep 3, 2025 |
27Monitor | CVE-2025-68663No exploit | Outline has a suspended user authentication bypass via WebSocket connectionsgetoutline · outline · CWE-287 | Medium6.9 | — | 0.2% | Feb 11, 2026 |
26Monitor | CVE-2026-44695No exploit | Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identitygetoutline · outline · CWE-352 | Medium6.5 | — | 0.1% | May 11, 2026 |
24Monitor | CVE-2024-37830No exploit | An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookiegetoutline · outline · CWE-601 | Medium6.1 | — | 0.3% | Jul 9, 2024 |
22Monitor | CVE-2026-25062No exploit | Outline Affected an Arbitrary File Read via Path Traversal in JSON Importgetoutline · outline · CWE-22 | Medium5.5 | — | 0.4% | Feb 11, 2026 |
21Monitor | CVE-2022-2342No exploit | Cross-site Scripting (XSS) - Stored in outline/outlinegetoutline · outline · CWE-79 | Medium5.4 | — | 0.7% | Jul 7, 2022 |
21Monitor | CVE-2024-40626No exploit | Stored Cross-site Scripting (XSS) vulnerability in Outline editorgetoutline · outline · CWE-79 | Medium5.4 | — | 0.5% | Jul 16, 2024 |
21Monitor | CVE-2023-3532No exploit | Cross-site Scripting (XSS) - Stored in outline/outlinegetoutline · outline · CWE-79 | Medium5.4 | — | 0.4% | Jul 6, 2023 |
17Monitor | CVE-2026-28506No exploit | Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Draftsgetoutline · outline · CWE-200 | Medium4.3 | — | 0.2% | Mar 17, 2026 |
- CVE-2026-3364036Monitor
Outline has a rate limit bypass that allows brute force of email login OTP
CriticalCVSS 9.1No exploitEPSS 0%getoutline · outlineMar 26, 2026
- CVE-2024-3782935Monitor
An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link
HighCVSS 8.8No exploitEPSS 0%getoutline · outlineJul 9, 2024
- CVE-2026-2490135Monitor
Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
HighCVSS 8.8No exploitEPSS 0%getoutline · outlineMar 17, 2026
- CVE-2023-5433134Monitor
Outline 1.6.0 - Unquoted Service Path
HighCVSS 8.5No exploitEPSS 0%getoutline · outlineJan 13, 2026
- CVE-2026-4164930Monitor
Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces
HighCVSS 7.7No exploitEPSS 0%getoutline · outlineApr 28, 2026
- CVE-2025-6448730Monitor
Outline is vulnerable to privilege escalation vulnerability in document sharing
HighCVSS 7.6No exploitEPSS 0%getoutline · outlineFeb 11, 2026
- CVE-2025-5835127Monitor
Outline's Local File Storage Feature can Cause CSP Bypass
MediumCVSS 6.8No exploitEPSS 0%getoutline · outlineSep 3, 2025
- CVE-2025-6866327Monitor
Outline has a suspended user authentication bypass via WebSocket connections
MediumCVSS 6.9No exploitEPSS 0%getoutline · outlineFeb 11, 2026
- CVE-2026-4469526Monitor
Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity
MediumCVSS 6.5No exploitEPSS 0%getoutline · outlineMay 11, 2026
- CVE-2024-3783024Monitor
An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie
MediumCVSS 6.1No exploitEPSS 0%getoutline · outlineJul 9, 2024
- CVE-2026-2506222Monitor
Outline Affected an Arbitrary File Read via Path Traversal in JSON Import
MediumCVSS 5.5No exploitEPSS 0%getoutline · outlineFeb 11, 2026
- CVE-2022-234221Monitor
Cross-site Scripting (XSS) - Stored in outline/outline
MediumCVSS 5.4No exploitEPSS 0%getoutline · outlineJul 7, 2022
- CVE-2024-4062621Monitor
Stored Cross-site Scripting (XSS) vulnerability in Outline editor
MediumCVSS 5.4No exploitEPSS 0%getoutline · outlineJul 16, 2024
- CVE-2023-353221Monitor
Cross-site Scripting (XSS) - Stored in outline/outline
MediumCVSS 5.4No exploitEPSS 0%getoutline · outlineJul 6, 2023
- CVE-2026-2850617Monitor
Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts
MediumCVSS 4.3No exploitEPSS 0%getoutline · outlineMar 17, 2026