CVE-2022-24074

 

Published at: - 17-03-2022 07:15

Last modified: - 23-03-2022 07:50

Total changes: - 2

Description

Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://cve.naver.com/detail/cve-2022-24074

 

Keywords

NVD

 

CVE-2022-24074

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures