CVE-2024-6938: SiYuan PDF PDF.js cross site scripting

Published Jul 21, 2024

Updated

A vulnerability has been found in SiYuan 3.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PDF.js of the component PDF Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271993 was assigned to this vulnerability.

Affected Software

2 affected components

SiYuan SiYuan

b3log SiYuan=3.1.0

Event History

Jul 21, 2024

CVE Published

via MITRE·04:31 AM

Data Sourced

via MITRE·04:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-6938?

CVE-2024-6938 is classified as a problematic vulnerability affecting SiYuan 3.1.0.

How do I fix CVE-2024-6938?

To fix CVE-2024-6938, update SiYuan to the latest version that addresses this vulnerability.

What type of vulnerability is CVE-2024-6938?

CVE-2024-6938 is a cross-site scripting (XSS) vulnerability in the PDF.js component of the SiYuan application.

Can CVE-2024-6938 be exploited remotely?

Yes, the exploit for CVE-2024-6938 can be launched remotely.

Which software is affected by CVE-2024-6938?

CVE-2024-6938 affects SiYuan version 3.1.0 specifically.