Today > | 1 High | 9 Medium | 3 Low vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-40618

July 11, 2024, 1:05 p.m.

Product(s) Impacted

Whale browser

  • before 3.26.244.21

Description

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension.

Weaknesses

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CWE ID: 79

Date

Published: July 11, 2024, 2:15 a.m.

Last Modified: July 11, 2024, 1:05 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@navercorp.com

References

https://cve.naver.com/ cve@navercorp.com