critical9.0
CVE-2024-2692
SiYuan version 3.0.3 allows executing arbitrary commands on the server.
Impact
SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Siyuan | Version 3.0.3 |