Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
CVE-2023-33244: Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
CVE-2023-33244 · published 3 years ago
Summary
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
What to do
- Update obsidian obsidian to version 1.2.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| obsidian | obsidian |
< 1.2.2 cpe:2.3:a:obsidian:obsidian:*:*:*:*:*:*:*:* |
Original advisory text
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
References
- https://forum.obsidian.md/t/obsidian-release-v1-2-2-insider-build/57488 Release Notes
- https://vuln.ryotak.net/advisories/66 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Timeline
Published20 May 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-33244 · NVD
Track software like this
Free during beta