PT-2026-25905 · Outline · Outline

Nlgbao1340 · Published 2026-03-17 · Updated 2026-03-17 · CVE-2026-28506

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Outline versions prior to 1.5.0

Description Outline is a collaborative documentation service. Prior to version 1.5.0, a logic flaw exists in the filtering mechanism of the /events.list API endpoint, which is used to retrieve activity logs. This flaw allows any authenticated user to access activity events related to documents lacking a collection (such as Private Drafts and Deleted Documents), bypassing standard permission controls. While the document content itself is not directly exposed, sensitive metadata is leaked, including Document IDs, user activity timestamps, and, in some cases, the Document Title of Permanent Delete. The leakage of valid Document IDs from deleted drafts compromises the randomness of UUIDs, simplifying the exploitation of high-severity IDOR attacks, like those affecting the documents.restore function.

Recommendations Versions prior to 1.5.0 should be updated to version 1.5.0 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-28506

GHSA-69X7-6FCR-MM6G

Affected Products

Outline

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28506.json · Exploit
• https://github.com/outline/outline/security/advisories/GHSA-69x7-6fcr-mm6g · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28506 · Security Note
• https://twitter.com/cyberbivash/status/2033953558068900251 · Twitter Post
• https://twitter.com/CVEnew/status/2033994271540580720 · Twitter Post