CVE-2022-24073

7.1 highEPSS 0.6%

High (7.1) in navercorp whale. EPSS 0.6% chance of exploitation in the next 30 days.

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-648
Published: 2022-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

navercorp:whale

References

https://cve.naver.com/detail/cve-2022-24073
https://cve.naver.com/detail/cve-2022-24073

Check your stack JSON