JavaScript File Replacement Vulnerability in Whale Browser by Whale
CVE-2022-24075

6.5MEDIUM

Key Information:

Vendor

Naver

Status
Naver Whale Browser
Vendor
CVE Published:
17 March 2022

What is CVE-2022-24075?

A vulnerability in Whale Browser prior to version 3.12.129.18 allows malicious extensions to replace JavaScript files associated with the HWP viewer. This could lead to unauthorized access to local HWP files, as the compromised scripts could facilitate reading these files when they are opened.

Affected Version(s)

NAVER Whale browser < 3.12.129.46

References

https://cve.naver.com/detail/cve-2022-24075
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Young Min Kim
.