PT-2022-16451
CVE-2022-24072
·
تاريخ النشر
2022-03-17
·
تاريخ التحديث
2022-03-23
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Whale browser versions prior to 3.12.129.18
Description
The issue concerns the devtools API in the Whale browser, which allowed extension developers to inject arbitrary JavaScript into the extension store web page via
devtools.inspectedWindow. This led to extensions downloading and uploading when users opened the developer tool.Recommendations
For Whale browser versions prior to 3.12.129.18, update to version 3.12.129.18 or later to resolve the issue.
As a temporary workaround, consider disabling the use of the devtools API until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾