outline
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 9, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions
Authorization Bypass in API Key/OAuth Scopes via Path Parsing Discrepancy
Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity
Outline: Unauthorized Document Publication via Mixed collectionId+documentId Share
Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7)
Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access
Outline: Stored XSS via Comment Mentions
Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces
Outline has a rate limit bypass that allows brute force of email login OTP
Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts
Monitor outline in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.