漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SiYuan has an arbitrary file deletion vulnerability
Vulnerability Description
SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the `POST /api/history/getDocHistoryContent` endpoint. An attacker can craft a payload to exploit this vulnerability, resulting in the deletion of arbitrary files on the server. Commit d9887aeec1b27073bec66299a9a4181dc42969f3 fixes this vulnerability and is expected to be available in version 3.1.19.
CVSS Information
N/A
Vulnerability Type
清理环节不完整
Vulnerability Title
SiYuan 安全漏洞
Vulnerability Description
SiYuan是SiYuan开源的一个隐私至上的个人知识管理系统。 SiYuan 3.1.18版本存在安全漏洞，该漏洞源于存在任意文件删除漏洞，攻击者利用此漏洞可以导致服务器上的任意文件被删除。
CVSS Information
N/A
Vulnerability Type
N/A