CVE-2023-54331highCWE-428

Outline 1.6.0 - Unquoted Service Path

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.2%

probabilidad de explotación

0.2%top 90% de las CVE

explotación observada

noninguna fuente lo reporta

Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the OutlineService executable to inject malicious code that will be executed with LocalSystem permissions.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

Getoutline · Outline

Referencias

https://getoutline.org/https://www.exploit-db.com/exploits/51128 https://www.vulncheck.com/advisories/outline-unquoted-service-path