First published: Sat May 20 2023(Updated: )
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Obsidian Obsidian | <1.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-33244 is a vulnerability in Obsidian before version 1.2.2 that allows calls to unintended APIs, potentially granting microphone access, camera access, and desktop notification to an embedded web page.
CVE-2023-33244 has a severity rating of 8.2, which is considered high.
CVE-2023-33244 affects Obsidian versions up to and excluding 1.2.2, allowing unauthorized calls to unintended APIs for microphone access, camera access, and desktop notification through an embedded web page.
To fix CVE-2023-33244, it is recommended to update Obsidian to version 1.2.2 or later, as the vulnerability has been patched in this release.
You can find more information about CVE-2023-33244 in the Obsidian forum post [here](https://forum.obsidian.md/t/obsidian-release-v1-2-2-insider-build/57488) and in the vulnerability advisory [here](https://vuln.ryotak.net/advisories/66).