PT-2022-24250
CVE-2022-38163
·
Published
2022-11-07
·
Updated
2022-11-29
Description by
CVSS 3.1
3.5
LowMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
F-Secure SAFE Browser versions prior to 19.0
Description
A Drag and Drop spoof vulnerability was discovered, allowing a spoofing of the address bar when a user performs a drag and drop operation on the address bar.
Recommendations
For versions prior to 19.0, update to a version above 19.0 to resolve the issue. As a temporary workaround, consider avoiding drag and drop operations on the address bar until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾