CVE-2025-64487: Outline is vulnerable to privilege escalation vulnerability in document sharing
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64487?
CVE-2025-64487 is classified as a privilege escalation vulnerability that can lead to unauthorized access to sensitive documents.
How do I fix CVE-2025-64487?
To fix CVE-2025-64487, update the Outline document management system to version 1.1.0 or later.
Which versions of Outline are affected by CVE-2025-64487?
CVE-2025-64487 affects all versions of Outline prior to 1.1.0.
What types of attacks can CVE-2025-64487 enable?
CVE-2025-64487 can enable unauthorized users to gain elevated privileges and access restricted documents.
How can I determine if I am impacted by CVE-2025-64487?
You can determine if you are impacted by CVE-2025-64487 by checking if you are running a version of Outline prior to 1.1.0.