Skip to content
Threat Feed
Subscribe

Product

SiYuan (< 3.7.4)

1 brief RSS
high advisory

Authentication Bypass in SiYuan Publish API

SiYuan versions prior to 3.7.4 contain an authentication bypass vulnerability allowing unauthenticated remote attackers to retrieve decrypted content from encrypted notebooks.

SiYuan +1 access-control web-vulnerability authentication-bypass information-disclosure api-security
8t 1c