Lucene search
+L

1 matches found

Veracode
Veracode
added 2025/01/13 1:49 a.m.12 views

Arbitrary File Deletion

github.com/siyuan-note/siyuan is vulnerable to Arbitrary file deletion. The vulnerability is due to a lack of proper safeguards in the POST /api/history/getDocHistoryContent endpoint, which allows maliciously crafted payloads to trigger the deletion of arbitrary files on the server...

9.1CVSS6.7AI score0.00589EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder