F-Secure Safe Browser Address Bar clickjacking

EntryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as critical, was found in F-Secure Safe Browser (version unknown). Affected is an unknown function of the component Address Bar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field	05/12/2022 04:59 PM	05/14/2022 06:12 PM
vendor	F-Secure	F-Secure
name	Safe Browser	Safe Browser
component	Address Bar Handler	Address Bar Handler
cwe	451 (privilege escalation)	451 (privilege escalation)
risk	1	1
cvss3_vuldb_av	N	N
cvss3_vuldb_ac	L	L
cvss3_vuldb_pr	N	N
cvss3_vuldb_ui	R	R
cvss3_vuldb_s	U	U
cvss3_vuldb_c	L	L
cvss3_vuldb_i	L	L
cvss3_vuldb_a	L	L
cvss3_vuldb_rc	C	C
cvss3_cna_av	N	N
cvss3_cna_ac	L	L
cvss3_cna_pr	H	H
cvss3_cna_ui	R	R
cvss3_cna_s	U	U
cvss3_cna_c	L	L
cvss3_cna_i	L	L
cvss3_cna_a	L	L
url	https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28872	https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28872
cve	CVE-2022-28872	CVE-2022-28872
cve_assigned	1649368800	1649368800
cve_cna	F-Secure	F-Secure
date	1652306400 (05/12/2022)	1652306400 (05/12/2022)
cvss2_vuldb_av	N	N
cvss2_vuldb_ac	L	L
cvss2_vuldb_au	N	N
cvss2_vuldb_ci	P	P
cvss2_vuldb_ii	P	P
cvss2_vuldb_ai	P	P
cvss2_vuldb_rc	C	C
cvss2_vuldb_e	ND	ND
cvss2_vuldb_rl	ND	ND
cvss3_vuldb_e	X	X
cvss3_vuldb_rl	X	X
cvss3_cna_basescore	4.3	4.3
cvss2_vuldb_basescore	7.5	7.5
cvss2_vuldb_tempscore	7.5	7.5
cvss3_vuldb_basescore	6.3	6.3
cvss3_vuldb_tempscore	6.3	6.3
cvss3_meta_basescore	5.3	5.3
cvss3_meta_tempscore	5.3	5.3
price_0day	$0-$5k	$0-$5k
cve_nvd_summary		A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.

◂ Previous Overview Next ▸

Might our Artificial Intelligence support you?

Check our Alexa App!