What is GHSA-45mx-g85m-wwm3?

GHSA-45mx-g85m-wwm3 is a security advisory published by GitHub Security Advisories with Critical severity. Obsidian does not require user confirmation for non-http/https URLs.

Which CVE IDs does GHSA-45mx-g85m-wwm3 cover?

GHSA-45mx-g85m-wwm3 covers the following CVE IDs: CVE-2021-38148. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-45mx-g85m-wwm3?

GHSA-45mx-g85m-wwm3 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-45mx-g85m-wwm3?

GHSA-45mx-g85m-wwm3 affects 1 product, including: npm/obsidian:\u003c 0.12.12.

GHSA-45mx-g85m-wwm3CriticalCVSS 9.8

Obsidian does not require user confirmation for non-http/https URLs.

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 22, 2024

🔗 CVE IDs covered (1)

CVE-2021-38148 →

📋 Description

Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.

🎯 Affected products1

npm/obsidian:< 0.12.12

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-38148
https://web.archive.org/web/20210807011714/https://forum.obsidian.md/t/obsidian-release-v0-12-12/21564
https://github.com/advisories/GHSA-45mx-g85m-wwm3