CVE-2026-120489: fallo de gravedad media en Outline
Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
10Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3
Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticated members to publish documents into private collections without write access. Attackers can detach a child document via documents.unpublish, retaining parentDocumentId, then call documents.update with a private collection UUID to inject phishing content.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
Outline · OutlineCVEs relacionadas — Outline
En el mismo producto, de las más peligrosas a las menos.
Referencias
https://github.com/outline/outline/blob/v1.11.0/server/commands/documentCreator.ts#L135-L143https://github.com/outline/outline/commit/d249b34e8e5fd465d542cad87190d411fdcbd5dchttps://github.com/outline/outline/releases/tag/v1.12.0https://github.com/outline/outline/security/advisories/GHSA-h6ff-rw9x-5mq2https://www.vulncheck.com/advisories/outline-before-1.12.0-incorrect-authorization-via-authorizedocumentpublish-detached-draft