İçeriğe atla
Noroxi

Getoutline kayıtları

getoutline üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%33,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2026-33640
    36İzleyin

    Outline has a rate limit bypass that allows brute force of email login OTP

    KritikCVSS 9,1İstismar yokEPSS %0

    getoutline · outline26 Mar 2026

  • CVE-2024-37829
    35İzleyin

    An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link

    YüksekCVSS 8,8İstismar yokEPSS %0

    getoutline · outline9 Tem 2024

  • CVE-2026-24901
    35İzleyin

    Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts

    YüksekCVSS 8,8İstismar yokEPSS %0

    getoutline · outline17 Mar 2026

  • CVE-2023-54331
    34İzleyin

    Outline 1.6.0 - Unquoted Service Path

    YüksekCVSS 8,5İstismar yokEPSS %0

    getoutline · outline13 Oca 2026

  • CVE-2026-41649
    30İzleyin

    Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

    YüksekCVSS 7,7İstismar yokEPSS %0

    getoutline · outline28 Nis 2026

  • CVE-2025-64487
    30İzleyin

    Outline is vulnerable to privilege escalation vulnerability in document sharing

    YüksekCVSS 7,6İstismar yokEPSS %0

    getoutline · outline11 Şub 2026

  • CVE-2025-58351
    27İzleyin

    Outline's Local File Storage Feature can Cause CSP Bypass

    OrtaCVSS 6,8İstismar yokEPSS %0

    getoutline · outline3 Eyl 2025

  • CVE-2025-68663
    27İzleyin

    Outline has a suspended user authentication bypass via WebSocket connections

    OrtaCVSS 6,9İstismar yokEPSS %0

    getoutline · outline11 Şub 2026

  • CVE-2026-44695
    26İzleyin

    Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity

    OrtaCVSS 6,5İstismar yokEPSS %0

    getoutline · outline11 May 2026

  • CVE-2024-37830
    24İzleyin

    An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie

    OrtaCVSS 6,1İstismar yokEPSS %0

    getoutline · outline9 Tem 2024

  • CVE-2026-25062
    22İzleyin

    Outline Affected an Arbitrary File Read via Path Traversal in JSON Import

    OrtaCVSS 5,5İstismar yokEPSS %0

    getoutline · outline11 Şub 2026

  • CVE-2022-2342
    21İzleyin

    Cross-site Scripting (XSS) - Stored in outline/outline

    OrtaCVSS 5,4İstismar yokEPSS %0

    getoutline · outline7 Tem 2022

  • CVE-2024-40626
    21İzleyin

    Stored Cross-site Scripting (XSS) vulnerability in Outline editor

    OrtaCVSS 5,4İstismar yokEPSS %0

    getoutline · outline16 Tem 2024

  • CVE-2023-3532
    21İzleyin

    Cross-site Scripting (XSS) - Stored in outline/outline

    OrtaCVSS 5,4İstismar yokEPSS %0

    getoutline · outline6 Tem 2023

  • CVE-2026-28506
    17İzleyin

    Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts

    OrtaCVSS 4,3İstismar yokEPSS %0

    getoutline · outline17 Mar 2026