CVE-2021-42057

creationtimestamp| type| source ---|---|--- 2021-11-04 23:25:42+00:00| seen| https://t.me/cibsecurity/31860...

CVE-2021-42057

Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened. NOTE: 0.4.13 provides a mitigation for some use cases...

CVE-2021-42057

Summary (CVE-2021-42057) Obsidian Dataview (plugin) up to 0.4.12-hotfix1 is vulnerable due to the evalInContext function executing user input, enabling an attacker to craft malicious Markdown files that will execute arbitrary code when opened. The issue is mitigated for some use cases by 0.4.13. ...