Skip to content
Threat Feed
Subscribe

Tag

Credential-Brute-Force

1 brief RSS
critical advisory

Brute-Force Vulnerability in SiYuan Kernel API Authentication

SiYuan kernel versions prior to 3.7.4 contain a flaw in the CheckAuth() middleware that permits unlimited authentication attempts against API tokens, enabling attackers to gain administrative access.

SiYuan kernel authentication-bypass credential-brute-force web-application
1t 1c