CVE-2022-24075: Medium severity naver whale browser vulnerability
Published Mar 17, 2022
·Updated
Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.
Affected Software
1 affected component
Navercorp Whale<3.12.129.18
Event History
Mar 17, 2022
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-24075?
CVE-2022-24075 has a high severity rating due to its potential to allow unauthorized access to local HWP files.
2
How do I fix CVE-2022-24075?
To fix CVE-2022-24075, update the Naver Whale Browser to version 3.12.129.18 or later.
3
What versions of Naver Whale Browser are affected by CVE-2022-24075?
CVE-2022-24075 affects all versions of Naver Whale Browser prior to 3.12.129.18.
4
What is the impact of exploiting CVE-2022-24075?
Exploiting CVE-2022-24075 could allow an attacker to read and access local HWP files through malicious scripts.
5
Can CVE-2022-24075 be mitigated without updating the browser?
Mitigating CVE-2022-24075 without updating the browser is difficult, but disabling browser extensions may reduce risk.