CyberRota Analysis
AI-GeneratedAn authorization bypass vulnerability in the /api/file/getFile endpoint of SiYuan versions up to 3.8.1 allows users with a reader role to access files from notebooks marked as private (Visible:false) by exploiting knowledge of the hidden notebook identifier and file path. This could lead to unauthorized access to sensitive notebook metadata and internal configurations. Organizations using SiYuan should prioritize patching this vulnerability to protect their private data from potential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal configuration by knowing the hidden notebook identifier and file path.