PT-2026-102388

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Insufficient publish-access checks in the 'getCurrentAttrViewImages' endpoint allow users with publish reader permissions to retrieve image asset paths from unauthorized databases. By providing an...