Medium severity6.1NVD Advisory· Published Mar 17, 2022· Updated Jun 17, 2026
CVE-2022-24072
CVE-2022-24072
Description
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.12.129.18
- NAVER/NAVER Whale browserv5Range: unspecified
Patches
Vulnerability mechanics
References
1- cve.naver.com/detail/cve-2022-24072nvdVendor Advisory
News mentions
0No linked articles in our index yet.