Security Advisory

CVE-2024-55659

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-11 22:53:45

Last updated 2024-12-12 16:29:46

Assigner GitHub_M

CVSS score 8.7

State PUBLISHED

Description

SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.

← Browse all CVEs View on cve.org ↗