Beveiligingsadvies

CVE-2026-29073

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 07:18:03

Laatst bijgewerkt 2026-03-09 20:03:19

Toegewezen door GitHub_M

CVSS-score 5.7

Status PUBLISHED

Beschrijving

SiYuan is a personal knowledge management system. Prior to version 3.6.0, the /api/query/sql lets a user run sql directly, but it only checks basic auth, not admin rights, any logged-in user, even readers, can run any sql query on the database. This issue has been patched in version 3.6.0.

← Alle CVE's bekijken Bekijk op cve.org ↗