PT-2026-67404 · Siyuan · Siyuan
CVSS v4.0
9.2
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
SiYuan versions prior to 3.7.3
Description
An information disclosure issue exists where the endpoints 'getHeadingDeleteTransaction', 'getHeadingLevelTransaction', and 'getHeadingInsertTransaction' return rendered block DOM without performing publish-access checks. This allows anonymous readers or users with publish RoleReader tokens to provide a heading block ID and read the full rendered content of documents that are disabled for publishing and should be restricted.
Recommendations
Update to version 3.7.3 or later.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siyuan