Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2023-2110
CVE-2023-2110:
NixOS vulnerability analysis and mitigation
Overview
Obsidian desktop versions before 1.2.8 contain a Local File Disclosure vulnerability (CVE-2023-2110) affecting Windows, Linux, and macOS platforms. The vulnerability stems from improper path handling via 'app://local/' protocol, which allows attackers to access and exfiltrate local files to remote web servers. This security issue was discovered in April 2023 and was patched in version 1.2.8 released on May 3, 2023 (Obsidian Changelog, STAR Labs).
Technical details
The vulnerability exists in the app:// custom URL scheme registered via electron.protocol.registerFileProtocol API in resources/app.asar/main.js. When handling requests starting with app://local/, the remainder of the URL is resolved as an absolute path. While there is a referrer check to prevent external webpage access, it can be bypassed by sending an empty referrer header through XMLHttpRequest, allowing unauthorized access to local files. The vulnerability has been assigned a CVSS 3.1 base score of 8.2 (High) with vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N (STAR Labs).
Impact
The vulnerability allows attackers to access and exfiltrate arbitrary files from the victim's system. Additionally, attackers can obtain a list of recently opened vaults from specific system locations, access workspace configurations, and potentially read most contents in the victim's vaults. The vulnerability also enables attackers to append content to existing markdown files or overwrite them entirely, potentially making the exploit wormable and compromising data integrity (STAR Labs).
Mitigation and workarounds
The vulnerability has been patched in Obsidian version 1.2.8 by removing support for app://local URLs. For users of affected versions, it is recommended to avoid opening untrusted markdown or canvas files in Obsidian and to refrain from copying text from untrusted webpages into Obsidian. Detection of exploitation attempts can be performed by monitoring for iframe tags loading suspicious URLs in markdown files (Obsidian Changelog, STAR Labs).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management