SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish Ro…

SiYuan versions prior to v3.7.3 are affected by SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint. The vulnerability is reachable by unauthenticated users as well as those with publish RoleReader tokens. Attackers can exploit unescaped method parameters and REGEXP clauses to execute arbitrary SQL queries against the read-write asset-content database. Successful exploitation allows reading, modifying, or deleting cross-notebook data. The issue has been patched in SiYuan v3.7.3. References are available via the NVD, a GitHub security advisory, and VulnCheck.