Vulnerabilities > CVE-2022-24075 - Files or Directories Accessible to External Parties vulnerability in Navercorp Whale

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

navercorp

CWE-552

NVD

Published: 2022-03-17

Updated: 2022-03-23

Summary

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

Vulnerable Configurations

Part	Description	Count
Application	Navercorp Navercorp Whale - Navercorp Whale 0.4.3.0 Navercorp Whale 0.5.16.0 Navercorp Whale 0.5.17.0 Navercorp Whale 0.5.18.4 Navercorp Whale 0.5.19.0 Navercorp Whale 0.5.20.4 Navercorp Whale 0.5.20.6 Navercorp Whale 0.5.21.3 Navercorp Whale 0.5.22.3 Navercorp Whale 0.5.23.6 Navercorp Whale 0.5.24.3 Navercorp Whale 0.5.25.5 Navercorp Whale 0.7.26.4 Navercorp Whale 0.7.27.4 Navercorp Whale 0.7.28.3 Navercorp Whale 0.7.29.5 Navercorp Whale 0.7.30.7 Navercorp Whale 0.7.31.4 Navercorp Whale 0.7.32.5 Navercorp Whale 0.7.32.9 Navercorp Whale 0.7.33.5 Navercorp Whale 0.9.34.9 Navercorp Whale 0.9.34.10 Navercorp Whale 0.9.35.4 Navercorp Whale 0.9.35.6 Navercorp Whale 0.10.36.11 Navercorp Whale 0.10.36.14 Navercorp Whale 0.10.36.20 Navercorp Whale 1.0.37.12 Navercorp Whale 1.0.37.13 Navercorp Whale 1.0.37.16 Navercorp Whale 1.0.38.8 Navercorp Whale 1.0.38.9 Navercorp Whale 1.0.39.11 Navercorp Whale 1.0.39.16 Navercorp Whale 1.0.40.7 Navercorp Whale 1.0.40.8 Navercorp Whale 1.0.40.10 Navercorp Whale 1.0.41.8 Navercorp Whale 1.1.2 Navercorp Whale 1.3.0 Navercorp Whale 1.3.48.4 Navercorp Whale 1.3.48.8 Navercorp Whale 1.3.48.10 Navercorp Whale 1.3.49.6 Navercorp Whale 1.3.50.3 Navercorp Whale 1.3.51.6 Navercorp Whale 1.3.51.7 Navercorp Whale 1.3.52.8 Navercorp Whale 1.3.53.4 Navercorp Whale 1.4.0 Navercorp Whale 1.4.63.6 Navercorp Whale 1.4.63.9 Navercorp Whale 1.4.63.11 Navercorp Whale 1.4.64.3 Navercorp Whale 1.4.64.6 Navercorp Whale 1.5.0 Navercorp Whale 1.5.71.12 Navercorp Whale 1.5.71.15 Navercorp Whale 1.5.72.4 Navercorp Whale 1.5.72.5 Navercorp Whale 1.5.73.6 Navercorp Whale 1.6.0 Navercorp Whale 1.7.0 Navercorp Whale 1.8.0 Navercorp Whale 1.8.1 Navercorp Whale 1.9.0 Navercorp Whale 1.9.1 Navercorp Whale 1.9.2 Navercorp Whale 1.9.3 Navercorp Whale 1.9.4 Navercorp Whale 1.9.5 Navercorp Whale 1.10.0 Navercorp Whale 1.10.1 Navercorp Whale 1.10.2 Navercorp Whale 1.10.3 Navercorp Whale 1.11.0 Navercorp Whale 1.12.0 Navercorp Whale 1.12.1 Navercorp Whale 1.13.0 Navercorp Whale 1.13.1 Navercorp Whale 1.14.0 Navercorp Whale 1.15.0	84

Common Weakness Enumeration (CWE)

CWE-552 - Files or Directories Accessible to External Parties

References

https://cve.naver.com/detail/cve-2022-24075