Threats Tagged 'ghsa-9fqr-vwrf-9xx3'

SiYuan versions before 3.8.5 have an information disclosure vulnerability that allows unauthorized users to obtain backlink block IDs and reference counts from password-protected and publish-disabled documents by querying published documents. This bypasses the intended confidentiality of unpublished content.