4 matches found
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
9.8CVSS0.00551EPSS
SaveExploits1References2
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
9.8CVSS7.9AI score0.00551EPSS
SaveExploits1References4
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
8AI score0.00551EPSS
SaveExploits1References2
CVE-2024-53504
CVE-2024-53504 describes an SQL injection in Siyuan 3.1.11 exploitable via the notebook parameter in /searchHistory. The metric indicates a critical impact (CVSS v3.1: 9.8, High confidentiality, integrity, and availability impacts) with network attack vector and no privileges or user interaction ...
9.8CVSS8AI score0.00551EPSS
SaveExploits1References2Affected Software1
20