7 matches found
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
CVE-2024-53505: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
CVE-2024-53505
A SQL injection vulnerability exists in Siyuan version 3.1.11 due to improper neutralization of special elements in the id parameter of the /getAssetContent API endpoint. An attacker could potentially exploit this to interact with the backend database. As a temporary workaround, it is recommended...
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
PT-2024-35765 · Siyuan · Siyuan
Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue has been identified. It occurs through the id parameter at the "/getAssetContent" API endpoint. Recommendations: For Siyuan version 3.1.11, as a temporary workaround, consider restricti...
