Description
Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL.
High · 8.0
CVE-2022-36450
EUVD-2022-39159GHSA-j67c-x57p-7jqm
Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without check…
Published Jul 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre