CVE-2024-2692
SiYuan 3.0.3 - RCE via Server Side XSS
概要
SiYuan 3.0.3 - RCE via Server Side XSS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.
参照URL
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com