Is Inline Manual down?
Current Inline Manual status is UP

Investigating - We're following the evolution of the situation around CVE-2024-3094 - https://nvd.nist.gov/vuln/detail/CVE-2024-3094Our Engineering and Security teams are currently investigating if the CVE-2024-3094 incident applies to any of our service resources. Mar 30, 2024 - 12:10 CET

Identified - We have identified the issue affecting the Authoring Tool and are diligently working on a fix. We expect to restore full functionality soon. Dec 05, 2023 - 11:54 CET

Investigating - We are experiencing a degraded performance on one of our parts of the Inline Manual Portal - app.inlinemanual.com.Affected areas:- People Tab - latest profiles and updates are not showing.- Various operations on People profiles are not working through the Portal.This does not affect your users' experience, as their progress is still being appropriately stored without any delay. Jan 11, 2023 - 21:48 CET

Monitoring - Incident ongoing since December 11th.We're following the evolution of the situation around CVE-2021-45046.Our Engineering and Security teams started to work on log4j incident on December 10th in the morning EU time and updated, mitigated or removed the vulnerable log4j packages from our environment.No misuse has been detected and active threat hunting continues.Our mitigation actions:- Updated log4j where possible- Scanned logs retrospectively one month back for various scenarios- Our security team is still actively hunting for signs of exploitationThe service affected is not directly accessible through internet. It sits within our private network.The request can be made through an API which goes through application first, not passing any headers and it correctly sanitizes all user entered content. This has been verified and confirmed.The service itself logs only minimum information, none of the user entered content makes it through to the logs.The attacker would need to be logged in to Inline Manual Portal or have API Access Tokens to be able to communicate indirectly through the API with the service - we have not detected any attempts to do so. Dec 16, 11:35 CET

Update - We are continuing to investigate this issue. Nov 16, 19:01 CET