CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.7.4 are vulnerable due to a missing authorization flaw in the /api/ref/refreshBacklink endpoint, allowing unauthorized users to perform persistent server-side writes. This vulnerability can be exploited to flush transaction queues, scan global references, and enqueue database writes, potentially leading to resource amplification attacks. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data manipulation and service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all references globally, and enqueue database writes, bypassing read-only protections and enabling resource amplification attacks.