4 matches found
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
CVE-2024-53504 describes an SQL injection in Siyuan 3.1.11 exploitable via the notebook parameter in /searchHistory. The metric indicates a critical impact (CVSS v3.1: 9.8, High confidentiality, integrity, and availability impacts) with network attack vector and no privileges or user interaction ...