CVE-2024-55659
EPSS 0.73%SiYuan has an arbitrary file write in the host via /api/asset/upload in github.com/siyuan-note/siyuan/kernel
Published: 12/11/2024Modified: 3/3/2026
Description
SiYuan has an arbitrary file write in the host via /api/asset/upload in github.com/siyuan-note/siyuan/kernel
Affected packages (2)
- Go/github.com/siyuan-note/siyuan/kernelfrom 0, <= 0.0.0-20241210012039-5129ad926a21
- Go/github.com/siyuan-note/siyuan/kernelfrom 0
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 4.0 | — | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
References (5)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-55659
- PATCHhttps://github.com/siyuan-note/siyuan
- WEBhttps://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71
- WEBhttps://github.com/siyuan-note/siyuan/security/advisories/GHSA-fqj6-whhx-47p7
- WEBhttps://pkg.go.dev/vuln/GO-2024-3326