Threats tagged 'ghsa-vf3p-f5rx-9848'

Outline versions before 1.12.0 have an authorization vulnerability in the authorizeDocumentPublish() function. This flaw allows authenticated members to publish documents into private collections without having write access. Exploitation involves detaching a child document using documents.unpublish while retaining the parentDocumentId, then updating the document with a private collection UUID to inject phishing content.