CVE-2024-53505

Description

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.

Affected Platforms

Weakness Type

CWE-89

References

• https://github.com/siyuan-note/siyuan/issues/13059
• https://github.com/siyuan-note/siyuan/issues/13077