CVE-2022-24073

High

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users…

naver·CWE-648·Published 2022-03-17

CVSS

7.1

EPSS

0.01

KEV

Exploits

cve.orgen

153 chars

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

NVDen

153 chars

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

La API de peticiones Web en Whale browser versiones anteriores a 3.12.129.18 permitía denegar el acceso a la tienda de extensiones o redirigir a cualquier URL cuando los usuarios accedían a la tienda

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:N/I:P/A:P
3.1	Primary	NVD	7.1	2.8	3.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L