CVE-2023-33244

概要

参考情報

• forum.obsidian.md/t/obsidian-release-v1-2-2-insider-build/57488 · Release Notes
• vuln.ryotak.net/advisories/66 · Third Party Advisory

obsidian のその他の脆弱性

• CVE-2023-2110高 7.1Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfil…
• CVE-2023-27035高 7.5An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified …
• CVE-2022-36450緊急 9.8Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checki…
• CVE-2021-38148緊急 9.8Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.