Access Control Flaw in Whale Browser's Extension Store
CVE-2022-24073

7.1HIGH

Key Information:

Vendor

Naver

Status
Naver Whale Browser
Vendor
CVE Published:
17 March 2022

What is CVE-2022-24073?

An access control vulnerability in the Web Request API of Whale Browser prior to version 3.12.129.18 allows an attacker to interfere with user access to the extension store. This flaw enables malicious redirection to arbitrary URLs or denies users access to legitimate extension resources, potentially exposing them to security risks and compromising the integrity of their browsing experience.

Affected Version(s)

NAVER Whale browser < 3.12.129.46

References

https://cve.naver.com/detail/cve-2022-24073
x_refsource_CONFIRM

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Young Min Kim
.