SiYuan through 3.8.4 Stored XSS via notebook names
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.5%
probabilidade de exploração
0.5%top 55% das CVEs
exploração observada
nãonenhuma fonte reporta
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens, enabling operating system command execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
siyuan-note · siyuanReferências
https://github.com/siyuan-note/siyuanhttps://github.com/siyuan-note/siyuan/blob/v3.8.4/app/src/util/mount.ts#L72https://github.com/siyuan-note/siyuan/blob/v3.8.4/kernel/model/file.go#L2446-L2454https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8c2m-33v9-vvqmhttps://www.vulncheck.com/advisories/siyuan-through-3.8.4-stored-xss-via-notebook-names