CVE-2024-55660 | siyuan-note SiYuan up to 3.1.15 Environment Variable renderSprig special elements used in a template engine (GHSA-4pjc-pwgq-q9jp)

A vulnerability was found in siyuan-note SiYuan up to 3.1.15 and classified as problematic. Affected by this issue is some unknown functionality of the file /api/template/renderSprig of the component Environment Variable Handler. The manipulation leads to improper neutralization of special elements used in a template engine.

This vulnerability is handled as CVE-2024-55660. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.