CVE-2024-2692

Publication date

2024-04-04 01:26:58

Family

Fluid Attacks

State

PUBLISHED

Description

SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.