CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.8.4 are vulnerable due to improper escaping of bookmark labels imported from notebook files, allowing attackers to exploit crafted .sy files containing unescaped HTML. This vulnerability enables the execution of arbitrary scripts in the Electron renderer, potentially leading to command execution on the host system. Organizations using SiYuan should prioritize patching this issue to mitigate the risk of remote code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to child_process for command execution.