3 matches found
GHSA-V598-7627-G9FX Duplicate Advisory: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vpjw-wf5h-cgpq. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowin...
9.2CVSS5.8AI score
SaveExploits0References3
20