CVE-2024-53507

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

CVE-2024-53507

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

CVE-2024-53507

A SQL injection vulnerability exists in Siyuan version 3.1.11 specifically within the /getHistoryItems endpoint. This flaw allows for potential exploitation through the improper neutralization of special elements used in SQL commands. While no specific exploit details or in-the-wild incidents are...

CVE-2024-53507

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

SiYuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan Open Source. A security vulnerability exists in SiYuan version 3.1.11, which originates from the /getHistoryItems file containing a SQL injection vulnerability...

CVE-2024-53507: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

PT-2024-35767 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue was found in the /getHistoryItems endpoint. This allows for potential exploitation through SQL injection attacks. No information is provided about the estimated number of affected devic...