PT-2024-35765 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue has been identified. It occurs through the id parameter at the "/getAssetContent" API endpoint. Recommendations: For Siyuan version 3.1.11, as a temporary workaround, consider restricti...