Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Obsidian Subscribe
Filtered by product Obsidian Dataview
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42057 1 Obsidian 1 Obsidian Dataview 2021-11-08 9.3 HIGH 7.8 HIGH
Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened. NOTE: 0.4.13 provides a mitigation for some use cases.