Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies' ApostropheCMS has an authorization issue vulnerability. This vulnerability arises from the repeated import of a continuation process that accepts client-controlled alternative choices, without binding them to the server-side analysis or authorization targets owned by user...

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

Summary Siyuan's block search endpoint concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes. Through Siyuan's publish service, an unauthenticated visitor is forwarded to the kernel with a reader-role token and can reach POST /api/search/fullTextSearchBloc...