CVE-2026-25992
SiYuan has a File Read Interface Case Bypass Vulnerability
概要
SiYuan has a File Read Interface Case Bypass Vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems such as Windows, attackers can bypass restrictions using mixed-case paths and read protected configuration files. This vulnerability is fixed in 3.5.5.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com