CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.7.4 are vulnerable to a second-order SQL injection in attribute-view template columns, allowing attackers to execute arbitrary SQL commands through malicious documents or packages. This vulnerability can lead to unauthorized read and write access to notebooks, posing a significant risk to data integrity and confidentiality. Organizations using SiYuan should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or packages with crafted template columns that execute arbitrary SQL on a victim's kernel when the package is imported and rendered, enabling read and write access across notebooks.