CVE-2022-24075

6.5 mediumEPSS 0.9%

Medium (6.5) in navercorp whale. EPSS 0.9% chance of exploitation in the next 30 days.

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-552
Published: 2022-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

navercorp:whale

References

https://cve.naver.com/detail/cve-2022-24075
https://cve.naver.com/detail/cve-2022-24075

Check your stack JSON