CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.7.4 are vulnerable due to inadequate validation of the packageName against the downloaded package content in bazaar install endpoints. This flaw allows attackers with same-origin access to overwrite trusted plugins by manipulating the packageName and repoURL parameters, potentially leading to persistent malicious modifications across application restarts. Organizations using SiYuan should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across application restarts.