THREAT OPS › Threat News › [GHSA] GHSA-gw25-m53r-qh88 (medium) — SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)
[GHSA] GHSA-gw25-m53r-qh88 (medium) — SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)
GHSA-gw25-m53r-qh88 Severity: medium CVE: None
SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)
## Summary SiYuan's `/export/` file handler was hardened against export disclosure (issue #12213) by adding an `IsSubPath(exportBaseDir, fullPath)` check and an `IsSensitivePath()` check in commit `bb481e1`. These g
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- bb481e1290c4a34255652ede85a546504505d2a7sha1
- CVE-2026-30869cve
- CVE-2026-41894cve
Original source: https://github.com/advisories/GHSA-gw25-m53r-qh88