CyberRota Analysis
AI-GeneratedThe vulnerability exists in SiYuan's development branch, specifically in the /api/av/getAttributeViewSearchTarget endpoint, which lacks proper authorization checks, allowing unauthorized access to sensitive database content. This could enable an anonymous user to retrieve information that should be restricted based on publish filters, potentially exposing confidential data. Organizations using the affected development branch should prioritize patching to version 3.7.4 or later to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization checks (no CheckReadonly, no publish-access or encrypted-notebook gating). Given a database identifier taken from a published page and a keyword, an anonymous reader can query the endpoint to retrieve matching database row content, including rows that publish filters (FilterAttributeViewByPublishAccess) would otherwise withhold. No released stable version is affected.