CVE-2024-2692
SiYuan 3.0.3 - RCE via Server Side XSS
Résumé
SiYuan 3.0.3 - RCE via Server Side XSS
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com