7 matches found
EUVD-2026-87717
capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...
CVE-2026-85583
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...
CVE-2026-85583
SiYuan versions prior to v3.8.2 are affected by a path traversal vulnerability in the reader-accessible file-read endpoint. The root cause is that the endpoint follows symlinks when opening authorized asset paths, allowing an attacker with the reader role to request a logical asset under data/ass...
EUVD-2026-71006
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...
CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...
CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...
CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...