CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829: Session Fixation

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

PT-2024-27771

Name of the Vulnerable Software and Affected Versions Outline versions 0.76.1 and earlier Description The issue allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link. Recommendations For Outline versions 0.76.1 and earlier, update to a versi...

Email enumeration via sending a magic sign in link functionality

Description The sending a magic sign in link functionality is vulnerable to an email enumeration attack. Proof of Concept If you enter registered email, you will get Login Link Sent! message. If you enter non-registered email, you will get Unknown email address. message...