CVE-2022-24075

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 3.12.129.18

Description The issue allows extensions to replace JavaScript files of the HWP viewer website, which could access local HWP files. When the HWP files are opened, the replaced script can read the files.

Recommendations For versions prior to 3.12.129.18, update to version 3.12.129.18 or later to resolve the issue. As a temporary workaround, consider disabling the use of extensions that can replace JavaScript files of the HWP viewer website until a patch is applied. Restrict access to local HWP files when using the HWP viewer website in the Whale browser to minimize the risk of exploitation.