critical9.8
CVE-2024-53505
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.
Impact
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Siyuan | Version 3.1.11 |