7 matches found
CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...
WS-2023-0281
Site-wide CSRF Bypass Strict Cookie leave to Website Takeover in outline/outline...
WS-2022-0351
In outline/outline, an incorrect API design lead to Site wide CSRF. By design, the api body only accepts is json values. But sending non-json values is also possible, beside, api accept auth from accessToken in Cookie. All of that leads to many other consequences, typically CSRF...
WS-2022-0192
Cross-site Scripting via link creation bypass filter javascript scheme in outline/outline through 0.65.2...
WS-2022-0196
Documents in trash accessible by Viewer role in outline/outline before 0.65.0...