CyberRota Analysis
AI-GeneratedVersions of SiYuan prior to 3.8.3 are susceptible to an SQL injection vulnerability in the graph.go query2Stmt function, allowing attackers to inject malicious SQL through inline HTML span tags in the getGraph endpoint. This could lead to unauthorized execution of arbitrary queries on the database, potentially exposing sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of data exfiltration.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escaping single quotes. A publish-mode reader or anonymous visitor can inject SQL via inline HTML span tags in the getGraph endpoint to execute arbitrary queries on the read-write database and exfiltrate private data across notebooks.