CVE-2025-64487

Katalog CVE

CVSS 7.6 · High EPSS 0,23%

Kerentanan Improper Privilege Management pada getoutline outline. Skor CVSS 3.1 7.6 (High) menurut github.com.

Deskripsi (NVD)

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

Rincian

Terbit di NVD

11 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.6 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686 advisory vendor
• https://github.com/outline/outline/releases/tag/v1.1.0 release notes