CVE-2022-24073 Open redirect in NAVER Whale browser

What is CVE-2022-24073?

CVE-2022-24073 is a high-severity vulnerability in NAVER Whale browser, published on 17 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

Weakness: CWE-648

Which versions are affected by CVE-2022-24073?

It affects 1 product.

Products include Navercorp Whale.

How do I fix CVE-2022-24073?

No fix has been published for CVE-2022-24073 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24073 being exploited?

There is no known exploitation of CVE-2022-24073 in the wild and no public exploit code.

Other vulnerabilities in NAVER Whale browser

• CVE-2025-62583 Security feature bypass in NAVER Whale browser Critical 9.8
• CVE-2025-53599 Cross-site scripting in NAVER Whale browser Critical 9.8
• CVE-2022-24074 Missing authorization in NAVER Whale browser Critical 9.8
• CVE-2025-69234 Security feature bypass in NAVER Whale browser Critical 9.1
• CVE-2018-9859 Privilege escalation in n/a High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-763r-rr26-5895.