CVE-2024-53504

Description

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.

Affected Platforms

Weakness Type

CWE-89

References

• https://github.com/siyuan-note/siyuan/issues/13058
• https://github.com/siyuan-note/siyuan/issues/13077