CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/ |
8.2 |
Haute |
||
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page. | 8.2 |
Haute |