VULNERABILITY INTELLIGENCE

CVE-2022-24075

CVSS score6.5 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2022-03-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

Weakness classification

  • cve@navercorp.com: CWE-552
  • nvd@nist.gov: CWE-552

Primary references