{"vulnerability": "GHSA-j4ph-9xwf-wcj4", "sightings": [{"uuid": "1e60a1c3-eae5-4381-9777-a5ad658a6269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-j4ph-9xwf-wcj4", "type": "seen", "source": "https://gist.github.com/alon710/78ce2182a966596104e43c4f25489270", "content": "# CVE-2026-73609: CVE-2026-73609: Missing Authorization in SiYuan Note getBookmarkLabels Endpoint\n\n> **CVSS Score:** 5.8\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73609\n\n## Summary\nAn information disclosure vulnerability (CWE-862) in the SiYuan Note platform before version v3.7.4 allows anonymous or unprivileged readers to obtain a complete list of bookmark labels globally across all workspaces and notebooks by querying the `/api/attr/getBookmarkLabels` API endpoint.\n\n## TL;DR\nMissing authorization checks on the `/api/attr/getBookmarkLabels` endpoint in SiYuan Note allow unauthenticated or unprivileged users to query and retrieve all bookmark labels across the entire workspace, exposing confidential project names, structures, and metadata.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS v3.1**: 5.8\n- **CVSS v4.0**: 6.9\n- **EPSS Score**: 0.00325 (0.33%)\n- **Exploit Status**: Conceptual Proof of Concept\n\n## Affected Systems\n\n- SiYuan Note\n- **SiYuan**: < v3.7.4 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan Note to version v3.7.4 or later\n- Bind Siyuan Note server strictly to localhost loopback interface (127.0.0.1)\n- Restrict endpoint access using Nginx or other reverse proxies to filter path /api/attr/getBookmarkLabels\n\n**Remediation Steps:**\n1. Identify the current running version of Siyuan Note.\n2. Download the updated version (v3.7.4 or later) from the official GitHub repository.\n3. Apply the update and restart the server.\n4. Validate the fix by attempting an unauthenticated POST request to /api/attr/getBookmarkLabels.\n\n## References\n\n- [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-73609)\n- [GitHub Security Advisory (GHSA)](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-j4ph-9xwf-wcj4)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73609) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-01T20:30:31.000000Z"}]}