7 matches found
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
CVE-2024-53505: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...
PT-2024-35765 · Siyuan · Siyuan
Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue has been identified. It occurs through the id parameter at the "/getAssetContent" API endpoint. Recommendations: For Siyuan version 3.1.11, as a temporary workaround, consider restricti...
