Description
Obsidian hook-get-address 存在远程代码执行漏洞。
Obsidian hook-get-address CVE-2022-36450 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://forum.obsidian.md/t/possible-remote-code-execution-through-obsidian-uri-scheme/39743
https://www.chtsecurity.com/news/f2a1ad21-3442-495f-8b6e-f0fe433d6caa
https://nvd.nist.gov/vuln/detail/CVE-2022-36450
https://github.com/advisories/GHSA-j67c-x57p-7jqm
https://avd.aquasec.com/nvd/2022/cve-2022-36450/
https://vulnerability.circl.lu/search?vendor=obsidian&product=obsidian
https://www.cvedetails.com/cve/CVE-2022-36450/
https://obsidian.md/files/security/2024-Obsidian-Cure53-Client-Audit-Full.pdf
https://www.cve.org/CVERecord?id=CVE-2022-36450