github.com/siyuan-note/siyuan/kernel vulnerabilities (Go)
114 vulnerabilities.
github.com/siyuan-note/siyuan/kernelGoSiYuan: Direct SQL Query API accessible to Reader-level users enables unauthorized database access5.7 Mediumgithub.com/siyuan-note/siyuan/kernelGoSiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE9.1 Criticalgithub.com/siyuan-note/siyuan/kernelGoSiYuan has a File Read Interface Case Bypass Vulnerability7.5 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan Vulnerable to Arbitrary File Read via File Copy Functionality8.3 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan vulnerable to arbitrary file read7.8 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan Vulnerable to Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon2.1 Lowgithub.com/siyuan-note/siyuan/kernelGoSiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload5.3 Mediumgithub.com/siyuan-note/siyuan/kernelGoSiYuan vulnerable to RCE via zip slip and Command Injection via PandocBin8.6 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE7.8 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan has an arbitrary file deletion vulnerability8.7 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan has an arbitrary file read via /api/template/render8.7 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan has an arbitrary file read and path traversal via /api/export/exportResources8.7 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan has an arbitrary file write in the host via /api/asset/upload8.7 Highgithub.com/siyuan-note/siyuan/kernelGoSiYuan has an SSTI via /api/template/renderSprig6.9 Medium