Lucene search
+L

2 matches found

Huntr
Huntr
•added 2025/03/12 11:27 p.m.•20 views

Path Traversal via Symbolic Links in `ObsidianReader`

Description The ObsidianReader class, designed to parse Obsidian vaults, contains a critical security flaw that allows arbitrary file read through symbolic links symlinks. When processing a vault, the reader does not resolve or validate the absolute paths of files, enabling an attacker to place a...

7.5CVSS6.9AI score0.00637EPSS
SaveExploits1
Rows per page
Query Builder