Lucene search

MitreCVE-2022-38163

HistoryNov 07, 2022 - 3:15 p.m.

CVE-2022-38163

2022-11-0715:15:10

mitre

web.nvd.nist.gov

cve-2022-38163

drag and drop

spoof

f-secure

browser

android

ios

nvd

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

30.4%

JSON

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar.

Affected configurations

Nvd

Node

f-securesafeRange≤19.0android

f-securesafeRange≤19.0iphone_os

VendorProductVersionCPE
f-securesafe*cpe:2.3:a:f-secure:safe:*:*:*:*:*:android:*:*
f-securesafe*cpe:2.3:a:f-secure:safe:*:*:*:*:*:iphone_os:*:*

Vendor	Product	Version	CPE
f-secure	safe	*	cpe:2.3:a:f-secure:safe::::::android::*
f-secure	safe	*	cpe:2.3:a:f-secure:safe::::::iphone_os::*

References

withsecure.com

www.f-secure.com/en/home/support/security-advisories

www.f-secure.com/en/home/support/security-advisories/cve-2022-38163

Social References

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

30.4%

JSON

Related for CVE-2022-38163