CVE-2023-54331highCWE-428

Outline 1.6.0 - Unquoted Service Path

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.2%

probabilidade de exploração

0.2%top 90% das CVEs

exploração observada

nãonenhuma fonte reporta

Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the OutlineService executable to inject malicious code that will be executed with LocalSystem permissions.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Getoutline · Outline

Referências

https://getoutline.org/https://www.exploit-db.com/exploits/51128 https://www.vulncheck.com/advisories/outline-unquoted-service-path