PT-2022-19274 · F Secure · F-Secure Safe Browser

Kirtikumar Anandrao Ramchandani · Published 2022-04-15 · Updated 2022-04-25 · CVE-2022-28870

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser (affected versions not specified)

Description A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails. This issue allows for potential phishing attacks due to incorrect address bar display when navigation fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-28870

Affected Products

F-Secure Safe Browser

References · 5

• https://f-secure.com/en/home/support/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28870 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28870 · Vendor Advisory
• https://f-secure.com/en/home/support/security-advisories/cve-2022-28870 · Vendor Advisory
• https://t.me/cvenotify/28995 · Telegram Post