CVE-2026-68585 in siyuan
Zusammenfassung
von MITRE • 03.08.2026
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID to retrieve the title, notebook, path, root ID, and icon of documents administrators marked as excluded from publishing.
If you want to get best quality of vulnerability data, you may have to visit VulDB.