CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.4 are vulnerable to an arbitrary file deletion flaw in the /api/search/removeTemplate endpoint, allowing authenticated admin attackers to exploit unvalidated path parameters. This vulnerability enables the deletion of any file or directory on the host filesystem that the kernel process can access, posing a significant risk of data loss and system compromise. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply absolute filesystem paths to recursively delete any file or directory the kernel process has permission to remove, anywhere on the host filesystem.