SiYuan before 3.8.10 SSRF via Skill-Install Download Redirect and DNS Rebinding
Summary
SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebinds t...
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| siyuan-notesiyuan |
< 3.8.10→ 3.8.10 |
3.8.10 |
Original description The description as published by the source.
SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebinds to loopback addresses, reaching internal services and metadata endpoints.
Source: CVE.org (CVE Program・cvelistV5) NVD