CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.8.4 are vulnerable to a path traversal flaw in the setNotebookIcon endpoint, enabling authenticated administrators to manipulate directory structures and write files outside designated workspace boundaries. This vulnerability allows attackers to exploit directory traversal sequences, potentially compromising system integrity by writing configuration files to arbitrary locations. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized file access and potential system exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authenticated administrators to create arbitrary directory trees and write files outside the workspace boundary. Attackers can supply directory traversal sequences in the notebook parameter to escape the workspace data directory and write conf.json files to arbitrary locations accessible by the kernel process.