CVE-2026-33670
SiYuan has directory traversal within its publishing service
Résumé
SiYuan has directory traversal within its publishing service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a notebook. Version 3.6.2 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov