PT-2022-19277 · F Secure · F-Secure Safe Browser

Kirtikumar Anandrao Ramchandani · Published 2022-05-12 · Updated 2022-05-23 · CVE-2022-28873

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser (affected versions not specified)

Description A vulnerability was discovered that affects the F-Secure SAFE browser. It allows an attacker to potentially exploit the Javascript window.open functionality, which could lead to address bar spoofing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-28873

Affected Products

F-Secure Safe Browser

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-28873 · Security Note
• https://f-secure.com/en/home/support/security-advisories · Vendor Advisory
• https://f-secure.com/en/home/support/security-advisories/cve-2022-28873 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28873 · Vendor Advisory
• https://t.me/cvenotify/30084 · Telegram Post
• https://t.me/cvenotify/30095 · Telegram Post
• https://t.me/cibsecurity/42468 · Telegram Post