Threats tagged 'ghsa-vm69-h85x-8p85'

The SiYuan kernel's IsSensitivePath function uses an incomplete denylist to block access to sensitive filesystem paths. Several important directories such as /opt, /usr, /home, /mnt, and /media are not blocked, allowing unauthorized reading of files from these locations via the globalCopyFiles API endpoint. This flaw enables reading application source code, configuration files, and mounted secrets, especially in Docker deployments. The vulnerability is fixed in version 3.6.2 by switching to an allowlist approach restricting file access to the workspace and explicitly approved paths.