SiYuan contains a critical SQL injection vulnerability that permits unauthenticated remote attackers to manipulate the asset-content database, threatening the integrity and confidentiality of user data.

This is an SQL injection vulnerability (CWE-89) triggered by improper handling of method parameters and REGEXP clauses within the fullTextSearchAssetContent endpoint. The vulnerability is exploitable by unauthenticated users or those with minimal RoleReader permissions, granting them unauthorized database access.

This vulnerability provides an attacker with the ability to perform unauthorized database operations, including data deletion and exfiltration. Given the potential to destroy or leak sensitive note content, the business impact is severe, particularly for organizations or individuals relying on SiYuan for sensitive information storage. A CVSS score of 10.0 reflects the critical urgency of this issue.

Immediate Action: Upgrade to SiYuan version 3.7.3 or later immediately to patch the vulnerable endpoint and implement secure query handling.

Proactive Monitoring: Review database access logs for queries utilizing REGEXP clauses or unusual patterns associated with full-text search functions.

Compensating Controls: Utilize a WAF or reverse proxy to filter requests targeting the fullTextSearchAssetContent endpoint for malicious SQL syntax until the software is updated.

Public Exploit Available: Unknown

The severity of this SQL injection necessitates an immediate upgrade to version 3.7.3. Organizations must treat this as a high-priority patch to prevent unauthorized access and potential catastrophic data loss within their note-taking environments.