Kernel: Duplicate Advisory: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers
Description
SiYuan versions up to 3.7.2 have a vulnerability where embedded block content is returned without proper publish-access filtering. This allows unauthorized anonymous users to access private and password-protected document content via specific API endpoints. The advisory is a duplicate and references GHSA-h6w7-xxcf-w2mq for the original report.
CVSS v3.1
Score 8.6high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
SiYuan before version 3.7.4 fails to enforce publish-access filtering on embedded block content in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. As a result, attackers can retrieve content from password-protected, hidden, or forbidden documents without authorization by requesting published blocks containing embed queries. This vulnerability is tracked as CWE-862 (Missing Authorization) and has a CVSS 3.1 score of 8.6, indicating critical severity. The advisory provided is a duplicate, with the original tracked under GHSA-h6w7-xxcf-w2mq.
Potential Impact
Unauthorized anonymous users can access sensitive content from private and password-protected documents by exploiting the lack of access control filtering on embedded block content. This leads to a confidentiality breach without requiring any privileges or user interaction.
Mitigation Recommendations
A fix is available in SiYuan version 3.7.4 and later. Users should upgrade to version 3.7.4 or newer to remediate this vulnerability. Since this is not a cloud service, manual patching is required. Patch status is confirmed by the version update information in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-cjwm-9h7g-pcr9
- Osv Schema Version
- 1.4.0
- Ecosystems
- ["Go"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6a9c2642acd9273b49fc9b98
Added to database: 09/05/2026, 14:25:06 UTC
Last enriched: 09/07/2026, 10:22:20 UTC
Last updated: 10/04/2026, 02:51:59 UTC
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.