CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to v3.8.2 are vulnerable due to improper filtering of private attribute-view cell values in the getAttributeViewKeys endpoint, allowing unauthorized access to hidden KeyValues payloads. This flaw can lead to exposure of sensitive database contents, posing a risk to data confidentiality. Organizations using affected versions should prioritize patching to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.