VendorsB3logsiyuan3.1.15
Vulnerabilities

B3log (Yunnan Liandi Technology Co., Ltd) SiYuan 3.1.15

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2024-55660
SiYuan has an SSTI via /api/template/renderSprig
Published 2024-12-11 · Analyzed
9.8EPSS 0.006
CVE-2024-55657
SiYuan has an arbitrary file read via /api/template/render
Published 2024-12-11 · Analyzed
8.7EPSS 0.007
CVE-2024-55658
SiYuan has an arbitrary file read and path traversal via /api/export/exportResources
Published 2024-12-11 · Analyzed
8.7EPSS 0.006
CVE-2024-55659
SiYuan has an arbitrary file write in the host via /api/asset/upload
Published 2024-12-11 · Analyzed
8.7EPSS 0.004