by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
15 packages
- go-outline
- mdbook-pdf-outline
- python312Packages.outlines
- typstPackages.suboutline_0_1_0
- typstPackages.suboutline_0_2_0
- python313Packages.outlines
- typstPackages.suboutline_0_3_0
- mplus-outline-fonts.osdnRelease
- python312Packages.outlines-core
- python313Packages.outlines-core
- python314Packages.outlines-core
- mplus-outline-fonts.githubRelease
- pkgsRocm.python3Packages.outlines
- typstPackages.outline-summaryst_0_1_0
- pkgsRocm.python3Packages.outlines-core
- @LeSuisse dismissed
Outline is vulnerable to privilege escalation vulnerability in document sharing
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.
References
-
https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686 x_refsource_CONFIRM
-
https://github.com/outline/outline/releases/tag/v1.1.0 x_refsource_MISC
Affected products
outline
- ==<= 1.0.1
Package maintainers
-
@cab404 Vladimir Serov <cab404@mailbox.org>
-
@xanderio Alexander Sieg <alex@xanderio.de>
-
@yrd Yannik Rödel <nix@yannik.info>
-
@blitz Julian Stecklina <js@alien8.de>
-
@snue Stefan Nuernberger <kabelfrickler@gmail.com>