Threats tagged 'ghsa-9r2h-ghj5-r7hq'

siyuan-note versions prior to 3.8.2 have an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint via the method=1 query parameter. This flaw allows attackers to inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes. The vulnerability has a high severity with a CVSS score of 8.7.