CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-40626

Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting (XSS) vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other users view this document, the malicious Javascript can execute in the origin of Outline. Outline includes CSP rules to prevent third-party code execution, however in the case of self-hosting and having your file storage on the same domain as Outline a malicious payload can be uploaded as a file attachment and bypass those CSP restrictions. This issue has been addressed in release version 0.77.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.7%

CVSS Severity

CVSS v3 Score 7.3

References

Products affected by CVE-2024-40626

Getoutline » Outline » Version: N/A

cpe:2.3:a:getoutline:outline:-
Getoutline » Outline » Version: 0.10.0

cpe:2.3:a:getoutline:outline:0.10.0
Getoutline » Outline » Version: 0.11.0

cpe:2.3:a:getoutline:outline:0.11.0
Getoutline » Outline » Version: 0.11.1

cpe:2.3:a:getoutline:outline:0.11.1
Getoutline » Outline » Version: 0.11.2

cpe:2.3:a:getoutline:outline:0.11.2
Getoutline » Outline » Version: 0.12.0

cpe:2.3:a:getoutline:outline:0.12.0
Getoutline » Outline » Version: 0.13.0

cpe:2.3:a:getoutline:outline:0.13.0
Getoutline » Outline » Version: 0.13.1

cpe:2.3:a:getoutline:outline:0.13.1
Getoutline » Outline » Version: 0.13.2

cpe:2.3:a:getoutline:outline:0.13.2
Getoutline » Outline » Version: 0.13.3

cpe:2.3:a:getoutline:outline:0.13.3
Getoutline » Outline » Version: 0.13.4

cpe:2.3:a:getoutline:outline:0.13.4
Getoutline » Outline » Version: 0.13.5

cpe:2.3:a:getoutline:outline:0.13.5
Getoutline » Outline » Version: 0.14.0

cpe:2.3:a:getoutline:outline:0.14.0
Getoutline » Outline » Version: 0.15.0

cpe:2.3:a:getoutline:outline:0.15.0
Getoutline » Outline » Version: 0.15.1

cpe:2.3:a:getoutline:outline:0.15.1
Getoutline » Outline » Version: 0.16.1

cpe:2.3:a:getoutline:outline:0.16.1
Getoutline » Outline » Version: 0.16.2

cpe:2.3:a:getoutline:outline:0.16.2
Getoutline » Outline » Version: 0.16.3

cpe:2.3:a:getoutline:outline:0.16.3
Getoutline » Outline » Version: 0.17.0

cpe:2.3:a:getoutline:outline:0.17.0
Getoutline » Outline » Version: 0.18.0

cpe:2.3:a:getoutline:outline:0.18.0
Getoutline » Outline » Version: 0.19.0

cpe:2.3:a:getoutline:outline:0.19.0
Getoutline » Outline » Version: 0.19.1

cpe:2.3:a:getoutline:outline:0.19.1
Getoutline » Outline » Version: 0.2.0

cpe:2.3:a:getoutline:outline:0.2.0
Getoutline » Outline » Version: 0.20.0

cpe:2.3:a:getoutline:outline:0.20.0
Getoutline » Outline » Version: 0.21.0

cpe:2.3:a:getoutline:outline:0.21.0
Getoutline » Outline » Version: 0.22.0

cpe:2.3:a:getoutline:outline:0.22.0
Getoutline » Outline » Version: 0.22.1

cpe:2.3:a:getoutline:outline:0.22.1
Getoutline » Outline » Version: 0.23.0

cpe:2.3:a:getoutline:outline:0.23.0
Getoutline » Outline » Version: 0.24.0

cpe:2.3:a:getoutline:outline:0.24.0
Getoutline » Outline » Version: 0.25.0

cpe:2.3:a:getoutline:outline:0.25.0
Getoutline » Outline » Version: 0.26.0

cpe:2.3:a:getoutline:outline:0.26.0
Getoutline » Outline » Version: 0.27.0

cpe:2.3:a:getoutline:outline:0.27.0
Getoutline » Outline » Version: 0.28.0

cpe:2.3:a:getoutline:outline:0.28.0
Getoutline » Outline » Version: 0.29.0

cpe:2.3:a:getoutline:outline:0.29.0
Getoutline » Outline » Version: 0.3.0

cpe:2.3:a:getoutline:outline:0.3.0
Getoutline » Outline » Version: 0.3.1

cpe:2.3:a:getoutline:outline:0.3.1
Getoutline » Outline » Version: 0.30.0

cpe:2.3:a:getoutline:outline:0.30.0
Getoutline » Outline » Version: 0.31.0

cpe:2.3:a:getoutline:outline:0.31.0
Getoutline » Outline » Version: 0.32.0

cpe:2.3:a:getoutline:outline:0.32.0
Getoutline » Outline » Version: 0.33.0

cpe:2.3:a:getoutline:outline:0.33.0
Getoutline » Outline » Version: 0.34.0

cpe:2.3:a:getoutline:outline:0.34.0
Getoutline » Outline » Version: 0.35.0

cpe:2.3:a:getoutline:outline:0.35.0
Getoutline » Outline » Version: 0.36.0

cpe:2.3:a:getoutline:outline:0.36.0
Getoutline » Outline » Version: 0.36.1

cpe:2.3:a:getoutline:outline:0.36.1
Getoutline » Outline » Version: 0.37.0

cpe:2.3:a:getoutline:outline:0.37.0
Getoutline » Outline » Version: 0.38.0

cpe:2.3:a:getoutline:outline:0.38.0
Getoutline » Outline » Version: 0.38.1

cpe:2.3:a:getoutline:outline:0.38.1
Getoutline » Outline » Version: 0.39.0

cpe:2.3:a:getoutline:outline:0.39.0
Getoutline » Outline » Version: 0.4.0

cpe:2.3:a:getoutline:outline:0.4.0
Getoutline » Outline » Version: 0.40.0

cpe:2.3:a:getoutline:outline:0.40.0
Getoutline » Outline » Version: 0.40.1

cpe:2.3:a:getoutline:outline:0.40.1
Getoutline » Outline » Version: 0.40.2

cpe:2.3:a:getoutline:outline:0.40.2
Getoutline » Outline » Version: 0.41.0

cpe:2.3:a:getoutline:outline:0.41.0
Getoutline » Outline » Version: 0.42.0

cpe:2.3:a:getoutline:outline:0.42.0
Getoutline » Outline » Version: 0.42.1

cpe:2.3:a:getoutline:outline:0.42.1
Getoutline » Outline » Version: 0.42.2

cpe:2.3:a:getoutline:outline:0.42.2
Getoutline » Outline » Version: 0.43.0

cpe:2.3:a:getoutline:outline:0.43.0
Getoutline » Outline » Version: 0.43.1

cpe:2.3:a:getoutline:outline:0.43.1
Getoutline » Outline » Version: 0.43.2

cpe:2.3:a:getoutline:outline:0.43.2
Getoutline » Outline » Version: 0.43.3

cpe:2.3:a:getoutline:outline:0.43.3
Getoutline » Outline » Version: 0.44.0

cpe:2.3:a:getoutline:outline:0.44.0
Getoutline » Outline » Version: 0.45.0

cpe:2.3:a:getoutline:outline:0.45.0
Getoutline » Outline » Version: 0.46.0

cpe:2.3:a:getoutline:outline:0.46.0
Getoutline » Outline » Version: 0.46.1

cpe:2.3:a:getoutline:outline:0.46.1
Getoutline » Outline » Version: 0.47.0

cpe:2.3:a:getoutline:outline:0.47.0
Getoutline » Outline » Version: 0.47.1

cpe:2.3:a:getoutline:outline:0.47.1
Getoutline » Outline » Version: 0.48.0

cpe:2.3:a:getoutline:outline:0.48.0
Getoutline » Outline » Version: 0.48.1

cpe:2.3:a:getoutline:outline:0.48.1
Getoutline » Outline » Version: 0.49.0

cpe:2.3:a:getoutline:outline:0.49.0
Getoutline » Outline » Version: 0.5.0

cpe:2.3:a:getoutline:outline:0.5.0
Getoutline » Outline » Version: 0.50.0

cpe:2.3:a:getoutline:outline:0.50.0
Getoutline » Outline » Version: 0.51.0

cpe:2.3:a:getoutline:outline:0.51.0
Getoutline » Outline » Version: 0.52.0

cpe:2.3:a:getoutline:outline:0.52.0
Getoutline » Outline » Version: 0.53.0

cpe:2.3:a:getoutline:outline:0.53.0
Getoutline » Outline » Version: 0.53.1

cpe:2.3:a:getoutline:outline:0.53.1
Getoutline » Outline » Version: 0.54.0

cpe:2.3:a:getoutline:outline:0.54.0
Getoutline » Outline » Version: 0.55.0

cpe:2.3:a:getoutline:outline:0.55.0
Getoutline » Outline » Version: 0.56.0

cpe:2.3:a:getoutline:outline:0.56.0
Getoutline » Outline » Version: 0.57.0

cpe:2.3:a:getoutline:outline:0.57.0
Getoutline » Outline » Version: 0.58.0

cpe:2.3:a:getoutline:outline:0.58.0
Getoutline » Outline » Version: 0.58.0-0

cpe:2.3:a:getoutline:outline:0.58.0-0
Getoutline » Outline » Version: 0.58.0-1

cpe:2.3:a:getoutline:outline:0.58.0-1
Getoutline » Outline » Version: 0.58.0-2

cpe:2.3:a:getoutline:outline:0.58.0-2
Getoutline » Outline » Version: 0.58.0-3

cpe:2.3:a:getoutline:outline:0.58.0-3
Getoutline » Outline » Version: 0.58.0-4

cpe:2.3:a:getoutline:outline:0.58.0-4
Getoutline » Outline » Version: 0.58.1

cpe:2.3:a:getoutline:outline:0.58.1
Getoutline » Outline » Version: 0.58.2

cpe:2.3:a:getoutline:outline:0.58.2
Getoutline » Outline » Version: 0.58.2-0

cpe:2.3:a:getoutline:outline:0.58.2-0
Getoutline » Outline » Version: 0.59.0

cpe:2.3:a:getoutline:outline:0.59.0
Getoutline » Outline » Version: 0.6.0

cpe:2.3:a:getoutline:outline:0.6.0
Getoutline » Outline » Version: 0.6.1

cpe:2.3:a:getoutline:outline:0.6.1
Getoutline » Outline » Version: 0.60.0

cpe:2.3:a:getoutline:outline:0.60.0
Getoutline » Outline » Version: 0.60.1

cpe:2.3:a:getoutline:outline:0.60.1
Getoutline » Outline » Version: 0.60.2

cpe:2.3:a:getoutline:outline:0.60.2
Getoutline » Outline » Version: 0.60.3

cpe:2.3:a:getoutline:outline:0.60.3
Getoutline » Outline » Version: 0.61.0

cpe:2.3:a:getoutline:outline:0.61.0
Getoutline » Outline » Version: 0.61.1

cpe:2.3:a:getoutline:outline:0.61.1
Getoutline » Outline » Version: 0.62.0

cpe:2.3:a:getoutline:outline:0.62.0
Getoutline » Outline » Version: 0.62.1

cpe:2.3:a:getoutline:outline:0.62.1
Getoutline » Outline » Version: 0.63.0

cpe:2.3:a:getoutline:outline:0.63.0
Getoutline » Outline » Version: 0.63.0-0

cpe:2.3:a:getoutline:outline:0.63.0-0
Getoutline » Outline » Version: 0.63.0-1

cpe:2.3:a:getoutline:outline:0.63.0-1
Getoutline » Outline » Version: 0.64.0

cpe:2.3:a:getoutline:outline:0.64.0
Getoutline » Outline » Version: 0.64.1

cpe:2.3:a:getoutline:outline:0.64.1
Getoutline » Outline » Version: 0.64.2

cpe:2.3:a:getoutline:outline:0.64.2
Getoutline » Outline » Version: 0.64.3

cpe:2.3:a:getoutline:outline:0.64.3
Getoutline » Outline » Version: 0.64.4

cpe:2.3:a:getoutline:outline:0.64.4
Getoutline » Outline » Version: 0.65.0

cpe:2.3:a:getoutline:outline:0.65.0
Getoutline » Outline » Version: 0.65.1

cpe:2.3:a:getoutline:outline:0.65.1
Getoutline » Outline » Version: 0.65.2

cpe:2.3:a:getoutline:outline:0.65.2
Getoutline » Outline » Version: 0.66.0

cpe:2.3:a:getoutline:outline:0.66.0
Getoutline » Outline » Version: 0.66.1

cpe:2.3:a:getoutline:outline:0.66.1
Getoutline » Outline » Version: 0.66.2

cpe:2.3:a:getoutline:outline:0.66.2
Getoutline » Outline » Version: 0.66.3

cpe:2.3:a:getoutline:outline:0.66.3
Getoutline » Outline » Version: 0.67.1

cpe:2.3:a:getoutline:outline:0.67.1
Getoutline » Outline » Version: 0.67.2

cpe:2.3:a:getoutline:outline:0.67.2
Getoutline » Outline » Version: 0.68.0

cpe:2.3:a:getoutline:outline:0.68.0
Getoutline » Outline » Version: 0.68.1

cpe:2.3:a:getoutline:outline:0.68.1
Getoutline » Outline » Version: 0.69.0

cpe:2.3:a:getoutline:outline:0.69.0
Getoutline » Outline » Version: 0.69.1

cpe:2.3:a:getoutline:outline:0.69.1
Getoutline » Outline » Version: 0.69.2

cpe:2.3:a:getoutline:outline:0.69.2
Getoutline » Outline » Version: 0.7.0

cpe:2.3:a:getoutline:outline:0.7.0
Getoutline » Outline » Version: 0.70.0

cpe:2.3:a:getoutline:outline:0.70.0
Getoutline » Outline » Version: 0.70.1

cpe:2.3:a:getoutline:outline:0.70.1
Getoutline » Outline » Version: 0.70.2

cpe:2.3:a:getoutline:outline:0.70.2
Getoutline » Outline » Version: 0.71.0

cpe:2.3:a:getoutline:outline:0.71.0
Getoutline » Outline » Version: 0.72.0

cpe:2.3:a:getoutline:outline:0.72.0
Getoutline » Outline » Version: 0.72.0-0

cpe:2.3:a:getoutline:outline:0.72.0-0
Getoutline » Outline » Version: 0.72.0-1

cpe:2.3:a:getoutline:outline:0.72.0-1
Getoutline » Outline » Version: 0.72.0-2

cpe:2.3:a:getoutline:outline:0.72.0-2
Getoutline » Outline » Version: 0.72.0-3

cpe:2.3:a:getoutline:outline:0.72.0-3
Getoutline » Outline » Version: 0.72.1

cpe:2.3:a:getoutline:outline:0.72.1
Getoutline » Outline » Version: 0.72.2

cpe:2.3:a:getoutline:outline:0.72.2
Getoutline » Outline » Version: 0.73.0

cpe:2.3:a:getoutline:outline:0.73.0
Getoutline » Outline » Version: 0.73.1

cpe:2.3:a:getoutline:outline:0.73.1
Getoutline » Outline » Version: 0.74.0

cpe:2.3:a:getoutline:outline:0.74.0
Getoutline » Outline » Version: 0.75.0

cpe:2.3:a:getoutline:outline:0.75.0
Getoutline » Outline » Version: 0.75.1

cpe:2.3:a:getoutline:outline:0.75.1
Getoutline » Outline » Version: 0.75.2

cpe:2.3:a:getoutline:outline:0.75.2
Getoutline » Outline » Version: 0.76.0

cpe:2.3:a:getoutline:outline:0.76.0
Getoutline » Outline » Version: 0.76.0-0

cpe:2.3:a:getoutline:outline:0.76.0-0
Getoutline » Outline » Version: 0.76.0-1

cpe:2.3:a:getoutline:outline:0.76.0-1
Getoutline » Outline » Version: 0.76.0-2

cpe:2.3:a:getoutline:outline:0.76.0-2
Getoutline » Outline » Version: 0.76.1

cpe:2.3:a:getoutline:outline:0.76.1
Getoutline » Outline » Version: 0.76.2-0

cpe:2.3:a:getoutline:outline:0.76.2-0
Getoutline » Outline » Version: 0.77.0

cpe:2.3:a:getoutline:outline:0.77.0
Getoutline » Outline » Version: 0.77.1

cpe:2.3:a:getoutline:outline:0.77.1
Getoutline » Outline » Version: 0.77.1-0

cpe:2.3:a:getoutline:outline:0.77.1-0
Getoutline » Outline » Version: 0.77.1-1

cpe:2.3:a:getoutline:outline:0.77.1-1
Getoutline » Outline » Version: 0.77.1-2

cpe:2.3:a:getoutline:outline:0.77.1-2
Getoutline » Outline » Version: 0.77.1-3

cpe:2.3:a:getoutline:outline:0.77.1-3
Getoutline » Outline » Version: 0.77.2

cpe:2.3:a:getoutline:outline:0.77.2
Getoutline » Outline » Version: 0.8.0

cpe:2.3:a:getoutline:outline:0.8.0
Getoutline » Outline » Version: 0.8.1

cpe:2.3:a:getoutline:outline:0.8.1
Getoutline » Outline » Version: 0.9.0

cpe:2.3:a:getoutline:outline:0.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-40626

Products

Pricing

Contact Us