CVE-2022-24075

—

CVSS 3.1

6.5 medium

EPSS

<1%p57

Published

Mar 17, 2022 (Mar 17, 2022)

Modified

Jun 17, 2026

Description

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

Vendors: navercorp
Products: whale
Weakness: CWE-552
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.