CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.7.4 are vulnerable to an unthrottled brute-force attack due to inadequate rate limiting in the Publish Service's Basic Auth implementation. This flaw allows unauthenticated remote attackers to repeatedly guess passwords for publish-viewer accounts, potentially compromising access to sensitive notes and notebooks. Organizations using affected versions should prioritize remediation to protect against unauthorized access and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implementation (PublishServiceTransport.RoundTrip() in kernel/server/proxy/publish.go). The Publish Service runs on a separate, unauthenticated-by-default listener (default TCP port 6808) and gates named publish-viewer accounts (Conf.Publish.Auth.Accounts) with Basic Auth that has no rate limiting, per-account lockout, or backoff. Unauthenticated remote attackers can submit unlimited password guesses against named accounts to gain access to published notes/notebooks.