CVE-2024-2692
SiYuan 3.0.3 - RCE via Server Side XSS
Summary
SiYuan 3.0.3 - RCE via Server Side XSS
Original description
The description as published by the source.
SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com