PT-2022-16452 · Unknown · Whale Browser

Young Min Kim · Published 2022-03-17 · Updated 2022-03-23 · CVE-2022-24073

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 3.12.129.18

Description The issue concerns the Web Request API, which allowed access to be denied to the extension store or redirected to any URL when users attempted to access the store.

Recommendations For versions prior to 3.12.129.18, update to version 3.12.129.18 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-648

Related Identifiers

CVE-2022-24073

Affected Products

Whale Browser

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-24073 · Security Note
• https://cve.naver.com/detail/cve-2022-24073 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24073 · Vendor Advisory
• https://t.me/cibsecurity/39115 · Telegram Post