SiYuan before 3.8.10 SSRF via Skill-Install Download Redirect and DNS Rebinding
概要
SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebinds t...
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| siyuan-notesiyuan |
3.8.10 未満→ 3.8.10 |
3.8.10 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebinds to loopback addresses, reaching internal services and metadata endpoints.
出典: CVE.org (CVE Program・cvelistV5) NVD