IT Security
SiYuan API Vulnerability: Unauthorized Reference Disclosure in getRefIDs Endpoint
A critical authorization flaw in SiYuan's /api/block/getRefIDs endpoint exposes reference IDs of password‑protected documents without authentication, posing confidentiality risks and enabling reconnaissance.… A critical authorization flaw in SiYuan's /api/block/getRefIDs endpoint exposes reference IDs of password‑protected documents…