Threats Tagged 'ghsa-4fq5-2r2r-5cw9'

1 threat

Threats Tagged 'ghsa-4fq5-2r2r-5cw9'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.5%	CVE-2026-100637siyuan · External Control of File Name or Path High8.3EPSS 0.5%2026-09-26CVE Database V5CVE-2026-100637 SiYuan versions before 3.8.4 have a path traversal vulnerability in the checkoutRepo endpoint. Authenticated administrators can exploit this flaw by supplying a crafted sessionID parameter to write JSON files outside the intended workspace directory. This allows overwriting arbitrary JSON files in kernel-writable directories beyond workspace boundaries. EPSS 0.5%Vulnerability siyuan-note #ghsa-4fq5-2r2r-5cw9	CVE Database V5	2026-09-26

Showing 1–1 of 1 result