CVE-2022-24075CWE-552

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files

published March 17, 2022

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00880 · 58.7th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2022-03-17T05:20Z
EPSS history
Timeline
  • 17 MAR 05:20Z
    Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files
    cvelistv5