CyberRota Analysis
AI-GeneratedThe vulnerability affects the SiYuan open-source personal knowledge management system prior to version 3.7.1, specifically through the block search endpoint, which improperly handles attacker-controlled input in SQL predicates. This flaw allows unauthenticated users to perform SQL injection attacks, potentially exposing hidden documents by returning sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes, allowing an unauthenticated publish visitor to inject a UNION SELECT and return rows from hidden documents by projecting an allowed visible box and path. This issue is fixed in versions 3.7.1.