CVE-2025-58351: Outline's Local File Storage Feature can Cause CSP Bypass
Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file system storage capabilities as an optional file storage strategy. This feature allowed a CSP bypass as well as a ContentType bypass that might facilitate further attacks. In the case of self-hosting and using Outline FILESTORAGE=local on the same domain as the Outline application, a malicious payload can be uploaded as a file attachment and bypass those CSP restrictions, allowing script execution within the context of another user. This is fixed in version 0.84.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58351?
CVE-2025-58351 has been classified with a medium severity level due to the potential for unauthorized access through CSP bypass.
How do I fix CVE-2025-58351?
To fix CVE-2025-58351, upgrade Outline to version 0.84.0 or later, which resolves the identified vulnerabilities.
What versions are affected by CVE-2025-58351?
CVE-2025-58351 affects Outline versions from 0.72.0 to 0.83.0.
What type of vulnerability is CVE-2025-58351?
CVE-2025-58351 is classified as a security vulnerability involving CSP bypass and improper file storage handling.
Can CVE-2025-58351 lead to data exposure?
Yes, CVE-2025-58351 could potentially lead to data exposure due to its bypass of content security policy mechanisms.