CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.8.2 are susceptible to an unbounded resource consumption vulnerability in the request-concurrency middleware, which allows unauthenticated attackers to exploit the system by sending numerous unique request paths. This can lead to excessive memory usage and increased synchronization overhead, ultimately degrading the availability of the application. Organizations using SiYuan should prioritize patching to mitigate potential denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middleware that retains mutex entries for every unique request path without eviction. Unauthenticated attackers can send numerous unique request paths to permanently increase process memory and synchronization overhead, degrading availability.