CyberRota Analysis
AI-GeneratedVersions of Siyuan prior to 3.8.2 are vulnerable to an authenticated SQL injection in the fullTextSearchBlock endpoint, specifically through the method=1 query parameter. This flaw allows attackers to execute UNION SELECT statements, enabling them to access the entire blocks table and bypass publish-access controls, thereby exposing sensitive document content and attributes. Organizations using affected versions should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.