CVE-2025-64487

Summary

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

Affected Software

Weaknesses

• CWE-269: CWE-269: Improper Privilege Management

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686
• https://github.com/outline/outline/releases/tag/v1.1.0

• ←Previous
• Next→