CVE-2026-33669
SiYuan has Arbitrary Document Reading within the Publishing Service
Résumé
SiYuan has Arbitrary Document Reading within the Publishing Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SiYuan is a personal knowledge management system. Prior to version 3.6.2, document IDs were retrieved via the /api/file/readDir interface, and then the /api/block/getChildBlocks interface was used to view the content of all documents. Version 3.6.2 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov