EUVD-2026-52273
GHSA-3rfw-7fxw-6jxm
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible endpoint, no authentication required per description; confidentiality impact is low (metadata only, no content); no integrity or availability impact applies.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID to retrieve the title, notebook, path, root ID, and icon of documents administrators marked as excluded from publishing.
AnalysisAI
Metadata disclosure in SiYuan before v3.7.3 exposes document titles, notebook paths, root IDs, and icons for administrator-restricted documents via the unauthenticated /api/block/getBlockInfo endpoint. The publish-access control flag is never checked server-side before returning document root metadata, making this a complete bypass of SiYuan's per-document publish exclusion feature. No public exploit is identified at time of analysis and no KEV listing exists, but the CVSS 4.0 vector (PR:N, AC:L) confirms exploitation requires no credentials and no special conditions against the network-facing API.
Technical ContextAI
SiYuan (CPE: cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:*) is a self-hosted personal knowledge management and note-taking application with a built-in publishing feature that allows administrators to selectively expose or exclude documents from public view. The root cause is CWE-862 (Missing Authorization): the /api/block/getBlockInfo API handler retrieves and serializes document root metadata - including title, notebook, path, root block ID, and icon - without consulting the publish-access permission model that governs whether a given document should be visible to external consumers. The authorization check exists at the publishing layer for rendered content but is absent at the raw API data layer, leaving a gap that any caller with a valid block ID can exploit regardless of role or session state.
RemediationAI
Vendor-released patch: SiYuan v3.7.3. Upgrade to v3.7.3 or later, which introduces proper authorization enforcement on the /api/block/getBlockInfo endpoint. The vendor security advisory is at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-pm3w-vxp9-ccwc. If an immediate upgrade is not possible, restrict access to the /api/block/ endpoint family at the reverse proxy or firewall layer by requiring session authentication before requests reach the API - this trades off API availability for unauthenticated publish consumers but eliminates unauthenticated metadata access. Alternatively, place the SiYuan instance behind a VPN or restrict it to internal network segments, preventing untrusted external callers from reaching the endpoint entirely until the patch is applied.
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today