Obsidian External Link Execution and WaveDrom/Bitfield RCE Fixes

Vulnerability Overview 1. External File Link Opening Vulnerability: - Description: Links and files are no longer opened via shell; untrusted inputs (such as the attribute, imported file paths, code block attributes) are passed as literal parameters or verified prior to use. - Impact: Addresses a security issue affecting Windows. - Remediation: Fixed by . 2. Arbitrary Code Execution in WaveDrom Rendering: - Description: WaveDrom code blocks enable arbitrary JavaScript execution by evaluating untrusted Markdown content using . - Impact: Affects all rendering paths, including live preview, presentation mode, and HTML export. - Remediation: Live preview now parses content using ; presentation mode uses and the helper function. 3. Arbitrary Code Execution in Bitfield Renderer: - Description: Bitfield fence code blocks evaluate user input via (through ). - Impact: Allows arbitrary code execution on the server side. - Remediation: Replaced with , as bitfield register definitions are pure data. 4. MathJax 4 Rendering Performance Issue: - Description: The component in MathJax 4 runs accessibility semantic enrichment (speech rule engine), increasing the cost per formula and causing slow re-rendering of formula-heavy previews on every edit. - Impact: Measured in Chrome, the cost per formula increased from 42ms to 890ms, a 21-fold difference. - Remediation: Semantic enrichment is disabled by default ( ), restoring MathJax 3-level performance. Users can enable it by setting in . Impact Scope External File Link Opening Vulnerability: Affects Windows users. Arbitrary Code Execution in WaveDrom Rendering: Affects all rendering paths, including live preview, presentation mode, and HTML export. Arbitrary Code Execution in Bitfield Renderer: Allows arbitrary code execution on the server side. MathJax 4 Rendering Performance Issue: Affects preview performance for users utilizing MathJax 4. Remediation 1. External File Link Opening Vulnerability: - Untrusted inputs are passed as literal parameters or verified prior to use. 2. Arbitrary Code Execution in WaveDrom Rendering: - Live preview uses for parsing. - Presentation mode uses and the helper function. 3. Arbitrary Code Execution in Bitfield Renderer: - Replaced with . 4. MathJax 4 Rendering Performance Issue: - Semantic enrichment is disabled by default ( ). - Users can enable it by setting in . POC Code or Exploit Code No specific POC code or exploit code is provided in the page.

Goal Reached Thanks to every supporter — we hit 100%!

Obsidian External Link Execution and WaveDrom/Bitfield RCE Fixes

More from this source