Threats tagged 'ghsa-p6g3-j3g7-h96w'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-73048siyuan · Missing Authorization Medium6.9EPSS 0.3%2026-08-14CVE Database V5CVE-2026-73048 SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotation identifiers visible in published pages, revealing citation relationships across forbidden and password-protected tiers. EPSS 0.3%Vulnerability siyuan-note #ghsa-p6g3-j3g7-h96w	CVE Database V5	2026-08-14

Page 1 of 1