PT-2024-36575 · Siyuan · Siyuan

Elleuch-X1 · Published 2024-12-11 · Updated 2024-12-18 · CVE-2024-55660

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.1.16

Description SiYuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables, potentially leading to information leakage.

Recommendations For versions prior to 3.1.16, update to version 3.1.16 to resolve the issue. As a temporary workaround, consider restricting access to the /api/template/renderSprig endpoint until the update is applied.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-1336

CWE-94

Related Identifiers

CVE-2024-55660

GHSA-4PJC-PWGQ-Q9JP

GO-2024-3324

OPENSUSE-SU-2024:14599-1

Affected Products

Siyuan

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55660.json · Exploit
• https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71 · Patch
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4pjc-pwgq-q9jp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55660 · Security Note
• https://osv.dev/vulnerability/GHSA-4pjc-pwgq-q9jp · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14599-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-3324 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-55660 · Vendor Advisory
• https://github.com/siyuan-note/siyuan · Note
• https://suse.com/security/cve/CVE-2024-45436 · Note
• https://suse.com/security/cve/CVE-2024-53257 · Note
• https://suse.com/security/cve/CVE-2024-55659 · Note
• https://suse.com/security/cve/CVE-2024-55660 · Note
• https://suse.com/security/cve/CVE-2024-12401 · Note
• https://suse.com/security/cve/CVE-2024-46528 · Note