CVE-2023-54331: Outline 1.6.0 - Unquoted Service Path
Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the OutlineService executable to inject malicious code that will be executed with LocalSystem permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54331?
CVE-2023-54331 is classified as a high severity vulnerability due to the potential for local attackers to execute arbitrary code with elevated privileges.
How do I fix CVE-2023-54331?
To fix CVE-2023-54331, you should modify the service path to be quoted properly in the configuration to prevent arbitrary code execution.
Which versions of Outline are affected by CVE-2023-54331?
CVE-2023-54331 affects Outline version 1.6.0.
What impacts does CVE-2023-54331 have on system security?
CVE-2023-54331 can allow local attackers to gain elevated privileges, potentially compromising the integrity and security of the system.
Can CVE-2023-54331 be exploited remotely?
CVE-2023-54331 requires local access, so it cannot be exploited remotely without prior access to the system.