Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: NAVER Whale browser 3.12.129.46 Clear all filters
TI-2022-08030 CVE-2022-24074 · GHSA-2hh3-2vjw-vgr4

Exposure of resource to wrong sphere in NAVER Whale browser

Priority MEDIUM 44

Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01052 Published 2022-03-17 Fixed in 3.12.129.46 CWE-668
TI-2022-08028 CVE-2022-24072 · GHSA-j72f-vfwh-m8f9

Improper privilege management in NAVER Whale browser

Priority LOW 28

The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploa…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00579 Published 2022-03-17 Fixed in 3.12.129.46 CWE-269