CVE-2026-103763 in SiYuan
Riassunto
di MITRE • 02/10/2026
SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn metadata of publish-excluded documents through the getNotebookInfo endpoint. Attackers, including anonymous visitors when no reader password is set, can query publish-visible notebooks to obtain document count, size and modification timestamps of hidden documents.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.