An information disclosure vulnerability in SiYuan's API allows unauthorized remote readers to retrieve cryptographic material necessary for offline, unthrottled GPU-based cracking of encrypted notebook master passwords.
SiYuan Kernel +5
info-disclosure
cve
cryptanalysis
authentication-bypass
webserver
vulnerability
session-forgery
credential-disclosure
+3
4r
8t
1c
updated