CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.4 are vulnerable to stored cross-site scripting attacks due to the failure to set appropriate Content-Disposition and X-Content-Type-Options headers for arbitrary file assets. This allows authenticated attackers to upload malicious HTML files that can execute scripts with full kernel API access when accessed by the workspace owner. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authenticated attackers can upload HTML files as assets and execute scripts with full kernel API access when the workspace owner opens the asset link.