CVE-2024-6938

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-6938
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6938.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-6938
Published
2024-07-21T04:31:04.115Z
Modified
2026-08-12T03:51:36.686907364Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
SiYuan PDF PDF.js cross site scripting
Details

A vulnerability has been found in SiYuan 3.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PDF.js of the component PDF Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271993 was assigned to this vulnerability.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6938.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/siyuan-note/siyuan

Affected ranges

Type
GIT
Repo
https://github.com/siyuan-note/siyuan
Events
Introduced
a683464b753b676e02371286d625c29e60ac5081
Last affected
a683464b753b676e02371286d625c29e60ac5081
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:b3log:siyuan:3.1.0:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.1.0"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "introduced": "3.1.0-NA"
        },
        {
            "last_affected": "3.1.0-NA"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

3.*
3.1.0
3.1.0-NA
v3.*
v3.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6938.json"