CVE-2024-37829: High severity Outline Outline vulnerability
Published Jul 9, 2024
·Updated
An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link.
Affected Software
2 affected components
Outline Outline<=0.76.1
Getoutline Outline<=0.76.1
Event History
Jul 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-37829?
CVE-2024-37829 has been rated with a high severity level due to the potential for session hijacking attacks.
2
How do I fix CVE-2024-37829?
To fix CVE-2024-37829, update Outline to version 0.76.2 or later immediately.
3
What causes CVE-2024-37829?
CVE-2024-37829 is caused by a vulnerability in Outline's handling of magic sign-in links, which allows session hijacking.
4
Who is affected by CVE-2024-37829?
CVE-2024-37829 affects users of Outline version 0.76.1 or earlier.
5
What are the potential risks of CVE-2024-37829?
The risks of CVE-2024-37829 include unauthorized access to user accounts and potential data leakage due to session hijacking.