CyberRota Analysis
AI-GeneratedAn access control bypass vulnerability in SiYuan versions prior to 3.7.4 allows attackers with publish reader tokens or anonymous access to directly access static-file routes, circumventing the publish-access controls enforced on the REST API. This could lead to unauthorized reading of sensitive templates, snippets, and export artifacts. Organizations using SiYuan should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API. Attackers with publish reader tokens or anonymous access in disabled-auth mode can read templates, snippets, and export artifacts by directly accessing static routes that lack the same restrictions as their REST API counterparts.