A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.

Published Nov 29, 2024 · Updated Dec 2, 2024 · Assigned by mitre