Lucene search
+L

2 matches found

OSV
OSV
•added 2026/09/10 2:48 p.m.•12 views

GO-2026-6373 SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure in github.com/siyuan-note/siyuan/kernel

SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure in github.com/siyuan-note/siyuan/kernel...

8.3CVSS5.8AI score0.00532EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/08/03 3:32 p.m.•14 views

Duplicate Advisory: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7hm9-v7vf-7g4w. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read...

8.3CVSS5.7AI score0.00532EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder