CVE-2024-37830: Medium severity outline vulnerability
Published Jul 9, 2024
·Updated
An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie.
Affected Software
1 affected component
Getoutline Outline<=0.76.1
Event History
Jul 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37830?
CVE-2024-37830 has been classified as a high severity vulnerability due to its potential for exploitation by attackers.
2
How do I fix CVE-2024-37830?
To fix CVE-2024-37830, you need to update Outline to version 0.76.2 or later.
3
What type of attack is enabled by CVE-2024-37830?
CVE-2024-37830 allows attackers to perform a cookie state manipulation attack, leading to redirection to malicious sites.
4
Which versions of Outline are affected by CVE-2024-37830?
Outline versions up to and including v0.76.1 are affected by CVE-2024-37830.
5
Can CVE-2024-37830 impact user data?
Yes, CVE-2024-37830 can potentially allow attackers to access sensitive user data by redirecting users to compromised sites.