CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.4 are vulnerable to a cross-site WebSocket hijacking issue due to improper origin validation in the admin-only /ws/network/proxy endpoint. This flaw allows attackers to create malicious webpages that can exploit the vulnerability, enabling them to route arbitrary network traffic through the victim's machine, effectively facilitating unauthorized access to internal resources. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of network compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket connections to this endpoint and direct the SiYuan kernel process to proxy arbitrary network traffic to attacker-chosen targets, enabling authenticated network pivoting through the victim's machine.