Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:siyuan_note:siyuan:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Second-Order SSTI in SiYuan via Attribute-View Template Columns

SiYuan kernel is vulnerable to a second-order SSTI via the queryBlocks template function, allowing attackers to achieve arbitrary SQL execution upon rendering imported malicious content.

kernel vulnerability ssti sql-injection rce
2t 1c