Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting (XSS) vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other users view this document, the malicious Javascript can execute in the origin of Outline. Outline includes CSP rules to prevent third-party code execution, however in the case of self-hosting and having your file storage on the same domain as Outline a malicious payload can be uploaded as a file attachment and bypass those CSP restrictions. This issue has been addressed in release version 0.77.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-07-16T17:03:39.883Z

Updated: 2024-08-02T04:33:11.960Z

Reserved: 2024-07-08T16:13:15.510Z

Link: CVE-2024-40626

cve-icon Vulnrichment

Updated: 2024-07-16T18:20:21.389Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-16T17:15:11.580

Modified: 2024-11-21T09:31:23.287

Link: CVE-2024-40626

cve-icon Redhat

No data.