CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.8.4 are vulnerable due to improper escaping of stored Attribute View values in textarea elements, enabling authenticated attackers to inject malicious JavaScript. This vulnerability allows for the execution of stored JavaScript when other users access affected database menus, and in environments with nodeIntegration enabled, it can lead to command execution with elevated privileges. Organizations using SiYuan should prioritize patching to mitigate the risk of unauthorized command execution and potential data compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute stored JavaScript when other users open affected database menus, and in the Electron desktop app with nodeIntegration enabled, this leads to command execution with SiYuan process privileges.