outline Security breaches

outline is an American outline open source used to provide the fastest wiki and knowledge base for growing teams. A security vulnerability exists in outline v0.76.1 and earlier versions that could allow an attacker to redirect a victimized user to a malicious site by intercepting and altering a...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37830

An issue in Outline = v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie...

CVE-2024-37830

An issue in Outline = v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

outline Security breaches

outline is the US-based outline open source used to provide the fastest wiki and knowledge base for growing teams. A security vulnerability exists in outline v0.76.1 and earlier versions, which originated from a vulnerability that allows an attacker to perform a session hijacking attack via user...

CVE-2024-37829

The CVE-2024-37829 issue affects Outline ≤ v0.76.1 and enables a session hijacking attack when a user interacts with a crafted magic sign-in link. The consolidated sources confirm the vulnerability but provide no concrete remediation details (e.g., patched version) within the supplied documents. ...

CVE-2024-37830

An issue in Outline = v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie...

Malicious code in update-material-outline-gap (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 40 Update: fontforge-20230101-11.fc40

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

CVE-2024-0895

The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to, and including, 2.2.26 due to insufficient input sanitization and output escaping on user supplied data. This makes it possible for authenticated...

Medium: poppler

Issue Overview: A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service DoS via a crafted PDF file. CVE-2022-27337 A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service DoS crash via a...

Freedesktop Poppler 安全漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in versions of Freedesktop Poppler prior to 23.06.0 that stems from a denial of service DoS that allows an attacker to create PDF files vi...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation which allows a remote attacker to cause a Denial of Service DoS via a crafted PDF file in OutlineItem::open. Remediation Upgrade poppler to version 25.11.0 or higher. References - Fix Commit - Issue - RedHat...

CVE-2023-3532

Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...

CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline

Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...

CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline

Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...

CVE-2023-3532

CVE-2023-3532 concerns a stored XSS in Outline (outline/outline) prior to version 0.70.1. The root cause described in connected sources is improper handling of user-supplied content stored for display, enabling injection of malicious scripts when documents or embeds are viewed. Specific attack ve...

outline 跨站脚本漏洞

outline is an American outline open source used to provide the fastest wiki and knowledge base for growing teams. A cross-site scripting vulnerability exists in versions prior to outline 0.70.1, which stems from vulnerability to stored cross-site scripting XSS attacks...

SUSE CVE-2023-26924

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...