PT-2022-16454
CVE-2022-24075
·
تاريخ النشر
2022-03-17
·
تاريخ التحديث
2022-03-23
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Whale browser versions prior to 3.12.129.18
Description
The issue allows extensions to replace JavaScript files of the HWP viewer website, which could access local HWP files. When the HWP files are opened, the replaced script can read the files.
Recommendations
For versions prior to 3.12.129.18, update to version 3.12.129.18 or later to resolve the issue. As a temporary workaround, consider disabling the use of extensions that can replace JavaScript files of the HWP viewer website until a patch is applied. Restrict access to local HWP files when using the HWP viewer website in the Whale browser to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾