An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie.
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')