CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2110

Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.5%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2023-2110

Obsidian » Obsidian » Version: 0.10.0

cpe:2.3:a:obsidian:obsidian:0.10.0
Obsidian » Obsidian » Version: 0.10.1

cpe:2.3:a:obsidian:obsidian:0.10.1
Obsidian » Obsidian » Version: 0.10.10

cpe:2.3:a:obsidian:obsidian:0.10.10
Obsidian » Obsidian » Version: 0.10.11

cpe:2.3:a:obsidian:obsidian:0.10.11
Obsidian » Obsidian » Version: 0.10.12

cpe:2.3:a:obsidian:obsidian:0.10.12
Obsidian » Obsidian » Version: 0.10.13

cpe:2.3:a:obsidian:obsidian:0.10.13
Obsidian » Obsidian » Version: 0.10.2

cpe:2.3:a:obsidian:obsidian:0.10.2
Obsidian » Obsidian » Version: 0.10.3

cpe:2.3:a:obsidian:obsidian:0.10.3
Obsidian » Obsidian » Version: 0.10.4

cpe:2.3:a:obsidian:obsidian:0.10.4
Obsidian » Obsidian » Version: 0.10.5

cpe:2.3:a:obsidian:obsidian:0.10.5
Obsidian » Obsidian » Version: 0.10.6

cpe:2.3:a:obsidian:obsidian:0.10.6
Obsidian » Obsidian » Version: 0.10.7

cpe:2.3:a:obsidian:obsidian:0.10.7
Obsidian » Obsidian » Version: 0.10.8

cpe:2.3:a:obsidian:obsidian:0.10.8
Obsidian » Obsidian » Version: 0.10.9

cpe:2.3:a:obsidian:obsidian:0.10.9
Obsidian » Obsidian » Version: 0.11.0

cpe:2.3:a:obsidian:obsidian:0.11.0
Obsidian » Obsidian » Version: 0.11.1

cpe:2.3:a:obsidian:obsidian:0.11.1
Obsidian » Obsidian » Version: 0.11.10

cpe:2.3:a:obsidian:obsidian:0.11.10
Obsidian » Obsidian » Version: 0.11.11

cpe:2.3:a:obsidian:obsidian:0.11.11
Obsidian » Obsidian » Version: 0.11.12

cpe:2.3:a:obsidian:obsidian:0.11.12
Obsidian » Obsidian » Version: 0.11.13

cpe:2.3:a:obsidian:obsidian:0.11.13
Obsidian » Obsidian » Version: 0.11.2

cpe:2.3:a:obsidian:obsidian:0.11.2
Obsidian » Obsidian » Version: 0.11.3

cpe:2.3:a:obsidian:obsidian:0.11.3
Obsidian » Obsidian » Version: 0.11.4

cpe:2.3:a:obsidian:obsidian:0.11.4
Obsidian » Obsidian » Version: 0.11.5

cpe:2.3:a:obsidian:obsidian:0.11.5
Obsidian » Obsidian » Version: 0.11.6

cpe:2.3:a:obsidian:obsidian:0.11.6
Obsidian » Obsidian » Version: 0.11.7

cpe:2.3:a:obsidian:obsidian:0.11.7
Obsidian » Obsidian » Version: 0.11.8

cpe:2.3:a:obsidian:obsidian:0.11.8
Obsidian » Obsidian » Version: 0.11.9

cpe:2.3:a:obsidian:obsidian:0.11.9
Obsidian » Obsidian » Version: 0.12.0

cpe:2.3:a:obsidian:obsidian:0.12.0
Obsidian » Obsidian » Version: 0.12.1

cpe:2.3:a:obsidian:obsidian:0.12.1
Obsidian » Obsidian » Version: 0.12.10

cpe:2.3:a:obsidian:obsidian:0.12.10
Obsidian » Obsidian » Version: 0.12.11

cpe:2.3:a:obsidian:obsidian:0.12.11
Obsidian » Obsidian » Version: 0.12.12

cpe:2.3:a:obsidian:obsidian:0.12.12
Obsidian » Obsidian » Version: 0.12.13

cpe:2.3:a:obsidian:obsidian:0.12.13
Obsidian » Obsidian » Version: 0.12.14

cpe:2.3:a:obsidian:obsidian:0.12.14
Obsidian » Obsidian » Version: 0.12.15

cpe:2.3:a:obsidian:obsidian:0.12.15
Obsidian » Obsidian » Version: 0.12.16

cpe:2.3:a:obsidian:obsidian:0.12.16
Obsidian » Obsidian » Version: 0.12.17

cpe:2.3:a:obsidian:obsidian:0.12.17
Obsidian » Obsidian » Version: 0.12.18

cpe:2.3:a:obsidian:obsidian:0.12.18
Obsidian » Obsidian » Version: 0.12.19

cpe:2.3:a:obsidian:obsidian:0.12.19
Obsidian » Obsidian » Version: 0.12.2

cpe:2.3:a:obsidian:obsidian:0.12.2
Obsidian » Obsidian » Version: 0.12.3

cpe:2.3:a:obsidian:obsidian:0.12.3
Obsidian » Obsidian » Version: 0.12.4

cpe:2.3:a:obsidian:obsidian:0.12.4
Obsidian » Obsidian » Version: 0.12.5

cpe:2.3:a:obsidian:obsidian:0.12.5
Obsidian » Obsidian » Version: 0.12.6

cpe:2.3:a:obsidian:obsidian:0.12.6
Obsidian » Obsidian » Version: 0.12.7

cpe:2.3:a:obsidian:obsidian:0.12.7
Obsidian » Obsidian » Version: 0.12.8

cpe:2.3:a:obsidian:obsidian:0.12.8
Obsidian » Obsidian » Version: 0.12.9

cpe:2.3:a:obsidian:obsidian:0.12.9
Obsidian » Obsidian » Version: 0.13.14

cpe:2.3:a:obsidian:obsidian:0.13.14
Obsidian » Obsidian » Version: 0.13.19

cpe:2.3:a:obsidian:obsidian:0.13.19
Obsidian » Obsidian » Version: 0.13.23

cpe:2.3:a:obsidian:obsidian:0.13.23
Obsidian » Obsidian » Version: 0.13.24

cpe:2.3:a:obsidian:obsidian:0.13.24
Obsidian » Obsidian » Version: 0.5.0

cpe:2.3:a:obsidian:obsidian:0.5.0
Obsidian » Obsidian » Version: 0.5.1

cpe:2.3:a:obsidian:obsidian:0.5.1
Obsidian » Obsidian » Version: 0.5.2

cpe:2.3:a:obsidian:obsidian:0.5.2
Obsidian » Obsidian » Version: 0.5.3

cpe:2.3:a:obsidian:obsidian:0.5.3
Obsidian » Obsidian » Version: 0.6.0

cpe:2.3:a:obsidian:obsidian:0.6.0
Obsidian » Obsidian » Version: 0.6.1

cpe:2.3:a:obsidian:obsidian:0.6.1
Obsidian » Obsidian » Version: 0.6.2

cpe:2.3:a:obsidian:obsidian:0.6.2
Obsidian » Obsidian » Version: 0.6.3

cpe:2.3:a:obsidian:obsidian:0.6.3
Obsidian » Obsidian » Version: 0.6.4

cpe:2.3:a:obsidian:obsidian:0.6.4
Obsidian » Obsidian » Version: 0.6.5

cpe:2.3:a:obsidian:obsidian:0.6.5
Obsidian » Obsidian » Version: 0.6.6

cpe:2.3:a:obsidian:obsidian:0.6.6
Obsidian » Obsidian » Version: 0.6.7

cpe:2.3:a:obsidian:obsidian:0.6.7
Obsidian » Obsidian » Version: 0.7.0

cpe:2.3:a:obsidian:obsidian:0.7.0
Obsidian » Obsidian » Version: 0.7.1

cpe:2.3:a:obsidian:obsidian:0.7.1
Obsidian » Obsidian » Version: 0.7.2

cpe:2.3:a:obsidian:obsidian:0.7.2
Obsidian » Obsidian » Version: 0.7.3

cpe:2.3:a:obsidian:obsidian:0.7.3
Obsidian » Obsidian » Version: 0.7.4

cpe:2.3:a:obsidian:obsidian:0.7.4
Obsidian » Obsidian » Version: 0.7.5

cpe:2.3:a:obsidian:obsidian:0.7.5
Obsidian » Obsidian » Version: 0.7.6

cpe:2.3:a:obsidian:obsidian:0.7.6
Obsidian » Obsidian » Version: 0.8.0

cpe:2.3:a:obsidian:obsidian:0.8.0
Obsidian » Obsidian » Version: 0.8.1

cpe:2.3:a:obsidian:obsidian:0.8.1
Obsidian » Obsidian » Version: 0.8.10

cpe:2.3:a:obsidian:obsidian:0.8.10
Obsidian » Obsidian » Version: 0.8.11

cpe:2.3:a:obsidian:obsidian:0.8.11
Obsidian » Obsidian » Version: 0.8.12

cpe:2.3:a:obsidian:obsidian:0.8.12
Obsidian » Obsidian » Version: 0.8.13

cpe:2.3:a:obsidian:obsidian:0.8.13
Obsidian » Obsidian » Version: 0.8.14

cpe:2.3:a:obsidian:obsidian:0.8.14
Obsidian » Obsidian » Version: 0.8.15

cpe:2.3:a:obsidian:obsidian:0.8.15
Obsidian » Obsidian » Version: 0.8.2

cpe:2.3:a:obsidian:obsidian:0.8.2
Obsidian » Obsidian » Version: 0.8.3

cpe:2.3:a:obsidian:obsidian:0.8.3
Obsidian » Obsidian » Version: 0.8.4

cpe:2.3:a:obsidian:obsidian:0.8.4
Obsidian » Obsidian » Version: 0.8.5

cpe:2.3:a:obsidian:obsidian:0.8.5
Obsidian » Obsidian » Version: 0.8.6

cpe:2.3:a:obsidian:obsidian:0.8.6
Obsidian » Obsidian » Version: 0.8.7

cpe:2.3:a:obsidian:obsidian:0.8.7
Obsidian » Obsidian » Version: 0.8.8

cpe:2.3:a:obsidian:obsidian:0.8.8
Obsidian » Obsidian » Version: 0.8.9

cpe:2.3:a:obsidian:obsidian:0.8.9
Obsidian » Obsidian » Version: 0.9.0

cpe:2.3:a:obsidian:obsidian:0.9.0
Obsidian » Obsidian » Version: 0.9.1

cpe:2.3:a:obsidian:obsidian:0.9.1
Obsidian » Obsidian » Version: 0.9.10

cpe:2.3:a:obsidian:obsidian:0.9.10
Obsidian » Obsidian » Version: 0.9.11

cpe:2.3:a:obsidian:obsidian:0.9.11
Obsidian » Obsidian » Version: 0.9.12

cpe:2.3:a:obsidian:obsidian:0.9.12
Obsidian » Obsidian » Version: 0.9.13

cpe:2.3:a:obsidian:obsidian:0.9.13
Obsidian » Obsidian » Version: 0.9.14

cpe:2.3:a:obsidian:obsidian:0.9.14
Obsidian » Obsidian » Version: 0.9.15

cpe:2.3:a:obsidian:obsidian:0.9.15
Obsidian » Obsidian » Version: 0.9.16

cpe:2.3:a:obsidian:obsidian:0.9.16
Obsidian » Obsidian » Version: 0.9.17

cpe:2.3:a:obsidian:obsidian:0.9.17
Obsidian » Obsidian » Version: 0.9.18

cpe:2.3:a:obsidian:obsidian:0.9.18
Obsidian » Obsidian » Version: 0.9.19

cpe:2.3:a:obsidian:obsidian:0.9.19
Obsidian » Obsidian » Version: 0.9.2

cpe:2.3:a:obsidian:obsidian:0.9.2
Obsidian » Obsidian » Version: 0.9.20

cpe:2.3:a:obsidian:obsidian:0.9.20
Obsidian » Obsidian » Version: 0.9.21

cpe:2.3:a:obsidian:obsidian:0.9.21
Obsidian » Obsidian » Version: 0.9.22

cpe:2.3:a:obsidian:obsidian:0.9.22
Obsidian » Obsidian » Version: 0.9.3

cpe:2.3:a:obsidian:obsidian:0.9.3
Obsidian » Obsidian » Version: 0.9.4

cpe:2.3:a:obsidian:obsidian:0.9.4
Obsidian » Obsidian » Version: 0.9.5

cpe:2.3:a:obsidian:obsidian:0.9.5
Obsidian » Obsidian » Version: 0.9.6

cpe:2.3:a:obsidian:obsidian:0.9.6
Obsidian » Obsidian » Version: 0.9.7

cpe:2.3:a:obsidian:obsidian:0.9.7
Obsidian » Obsidian » Version: 0.9.8

cpe:2.3:a:obsidian:obsidian:0.9.8
Obsidian » Obsidian » Version: 0.9.9

cpe:2.3:a:obsidian:obsidian:0.9.9
Obsidian » Obsidian » Version: 1.1.9

cpe:2.3:a:obsidian:obsidian:1.1.9
Apple » Macos » Version: N/A

cpe:2.3:o:apple:macos:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2110

Products

Pricing

Contact Us