CVE-2026-43890

Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken authorization pattern. When both collectionId and documentId are supplied in the request, the route...

CVE-2026-43890: Authorization Bypass Through User-Controlled Key

Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken authorization pattern. When both collectionId and documentId are supplied in the request, the route...

CVE-2020-12643

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address...

PT-2020-13181

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.3 and earlier Description The issue is related to Incorrect Access Control. It can be exploited via an "/api/subscriptions" request for a snippet containing an email address. Recommendations For OX App Suite versions...

CVE-2020-12643: Authorization Bypass Through User-Controlled Key

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address...