critical9.8
CVE-2024-53506
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.
Impact
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Siyuan | Version 3.1.11 |