← Database

CVE-2021-38148

CRITICAL CVSS: 9.8 Published: 2021-08-07 Modified: 2026-06-17

Description

Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.

Affected Platforms

Obsidian Obsidian

Weakness Type

NVD-CWE-noinfo

References