9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.8%
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.
github.com/obsidianmd/obsidian-api
nvd.nist.gov/vuln/detail/CVE-2021-38148
web.archive.org/web/20210807011714/https://forum.obsidian.md/t/obsidian-release-v0-12-12/21564