GHSA-ccpq-6vhp-2mrjHighCVSS 7.7
SiYuan before 3.8.9 contains an information disclosure vulnerability that allows authenticated...
🔗 CVE IDs covered (1)
📋 Description
SiYuan before 3.8.9 contains an information disclosure vulnerability that allows authenticated Reader users to retrieve credential-named widget files by bypassing the sensitive-path guard in getFile. Attackers can request paths like /data/widgets//credentials.json for publish-referenced widgets to obtain API keys, tokens, or other stored secrets.
🔗 References (5)
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3pm7-cc76-7j2p
- https://nvd.nist.gov/vuln/detail/CVE-2026-126264
- https://github.com/siyuan-note/siyuan/commit/d122dee55e8d3c77de313d0ad6efae8b6b0ebc07
- https://www.vulncheck.com/advisories/siyuan-before-3.8.9-sensitive-file-disclosure-via-api-file-getfile
- https://github.com/advisories/GHSA-ccpq-6vhp-2mrj