CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

PT-2024-35765 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue has been identified. It occurs through the id parameter at the "/getAssetContent" API endpoint. Recommendations: For Siyuan version 3.1.11, as a temporary workaround, consider restricti...

CVE-2024-53505

Siyuan 3.1.11 is affected by a SQL injection in the /getAssetContent API via the id parameter. Root cause: unsanitized id leads to injection; impact per CVSS v3.1 is CRITICAL (Confidentiality, Integrity, Availability) with a base score of 9.8. No patch details are provided in the documents; a pra...