CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.3 are vulnerable due to inadequate validation of the avID parameter in attribute-view read endpoints, enabling attackers to exploit directory traversal vulnerabilities. This flaw allows both authenticated users with RoleReader permissions and unauthenticated clients to access sensitive JSON files outside the intended directory, potentially exposing cross-scope database information. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data disclosure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish authentication is disabled can read JSON files outside the attribute-view directory to disclose cross-scope database content.