CVE-2022-24075

2022-03-1705:20:17

CWE-552

naver

www.cve.org

whale browser

vulnerability

local file access

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

51.4%

JSON

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

CNA Affected

[
  {
    "product": "NAVER Whale browser",
    "vendor": "NAVER",
    "versions": [
      {
        "lessThan": "3.12.129.46",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

cve.naver.com/detail/cve-2022-24075