VDB
ANCHORE-2024-55659
ANCHORE-2024-55659
PUBLISHED
SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siyuan-note | siyuan | 0, 0, 0 |
Timeline
- Dec 11, 2024 CVE Published
- Dec 12, 2024 CVE Updated