CVE-2024-55659

Published: 2024-12-12T02:15Z

Last Modified: 2024-12-12T02:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt