PT-2026-2421 · Outline · Outline

Milad Karimi · Publicado 2026-01-13 · Atualizado 2026-02-02 · CVE-2023-54331

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Outline version 1.6.0

Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the OutlineService executable, which could allow injection of malicious code to be executed with LocalSystem permissions.

Recommendations Apply appropriate quoting to the service path for the OutlineService executable.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2023-54331

Produtos afetados

Outline

Referências · 7

• 🔥 https://exploit-db.com/exploits/51128 · Exploit
• https://osv.dev/vulnerability/CVE-2023-54331 · Aviso do Fabricante
• https://vulncheck.com/advisories/outline-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-54331 · Nota de Segurança
• https://getoutline.org · Nota
• https://twitter.com/CVEnew/status/2011383043047543060 · Publicação no Twitter
• https://t.me/cveNotify/150599 · Publicação no Telegram