What is GHSA-4pjc-pwgq-q9jp?

GHSA-4pjc-pwgq-q9jp is a security advisory published by GitHub Security Advisories with Medium severity. SiYuan has an SSTI via /api/template/renderSprig

Which CVE IDs does GHSA-4pjc-pwgq-q9jp cover?

GHSA-4pjc-pwgq-q9jp covers the following CVE IDs: CVE-2024-55660. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-4pjc-pwgq-q9jp?

GHSA-4pjc-pwgq-q9jp affects 1 product, including: go/github.com/siyuan-note/siyuan/kernel:\u003c= 0.0.0-20241210012039-5129ad926a21.

GHSA-4pjc-pwgq-q9jpMedium

SiYuan has an SSTI via /api/template/renderSprig

Vendor

GitHub Security Advisories

Published

December 11, 2024

Last Modified

December 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-55660 →

📋 Description

Summary

Siyuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables

Impact

Information leakage

🎯 Affected products1

go/github.com/siyuan-note/siyuan/kernel:<= 0.0.0-20241210012039-5129ad926a21

🔗 References (5)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4pjc-pwgq-q9jp
https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71
https://nvd.nist.gov/vuln/detail/CVE-2024-55660
https://pkg.go.dev/vuln/GO-2024-3324
https://github.com/advisories/GHSA-4pjc-pwgq-q9jp