CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.4 are vulnerable due to insufficient publish-access filtering on specific API endpoints, allowing authenticated users to access sensitive database schema information and enumerate block IDs across workspaces. This could lead to unauthorized access to content from hidden or password-protected documents, posing a risk to data confidentiality. Organizations using affected versions should prioritize updating to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing authenticated readers to retrieve complete database column schemas including descriptions, select vocabularies, and template expressions. Additionally, getBlockDefIDsByRefText and getBlockRelevantIDs endpoints enumerate workspace-wide block IDs without publish scoping, enabling attackers to discover valid block identifiers across publish boundaries and access content from hidden or password-protected documents.