SiYuan vulnerabilities

A vulnerability in SiYuan before version 3.7.1 allows an authenticated administrator or API-token user to copy sensitive credential files (e.g., .git-credentials, .netrc, .pgpass) into the workspace and exfiltrate them via the file API. The issue stems from insufficient path filtering in the util.IsSensitivePath function.

A vulnerability in SiYuan prior to version 3.7.1 allows a Reader user in publish mode to read private document paths, notebook, document, and block IDs, as well as search and replace keywords for unpublished documents. The issue is due to missing publish-access filtering on the /api/storage/getCriteria endpoint.

A vulnerability in SiYuan before version 3.7.1 allows an unauthenticated publish visitor to inject a UNION SELECT query into the block search endpoint. Attackers can read hidden documents by manipulating path values in POST requests.

SiYuan prior to 3.7.1 has a stored cross-site scripting (XSS) vulnerability in the HTML rendering via the Lute engine. The dangerous JavaScript scheme block does not check form action or SVG xlink:href attributes, allowing OS command execution in the Electron desktop renderer.

A vulnerability in SiYuan before version 3.7.1 allows reading files outside the snippets directory. The serveSnippets function improperly handles path traversal sequences like %2e%2e (..), enabling an authenticated attacker to read workspace secrets and the document database.

SiYuan is a knowledge management system that prior to version 3.7.0 had the /api/icon/getDynamicIcon endpoint which did not require authentication. Attackers can exploit this endpoint to execute arbitrary SELECT queries against the SiYuan SQLite database, leading to data leakage.

SiYuan is an open-source personal knowledge management system. In versions prior to 3.7.0, a vulnerability allowed an unauthenticated attacker to read arbitrary files in WorkspaceDir by double URL-encoding in the /assets/*path route.

In SiYuan personal knowledge management system prior to version 3.6.2, the publish service exposes bookmarked blocks from password-protected documents to unauthenticated visitors. In publish/read-only mode, the filter FilterBlocksByPublishAccess treats a nil context as authorized, skipping the publish password check and returning bookmarked blocks from protected documents.

SiYuan versions 3.5.1 and prior use a hardcoded cryptographic secret for its session store, rendering session encryption ineffective. Since the sensitive AccessAuthCode is stored in the session cookie, an attacker who intercepts the encrypted session cookie can decrypt it locally using the public key and retrieve the AccessAuthCode in plain text, then take over the session.