F-Secure Safe Browser Address Bar clickjacking

A vulnerability, which was classified as critical, was found in F-Secure Safe Browser (version unknown). Affected is an unknown function of the component Address Bar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field05/12/2022 04:59 PM05/14/2022 06:12 PM
vendorF-SecureF-Secure
nameSafe BrowserSafe Browser
componentAddress Bar HandlerAddress Bar Handler
cwe451 (privilege escalation)451 (privilege escalation)
risk11
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_prNN
cvss3_vuldb_uiRR
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rcCC
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prHH
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aLL
urlhttps://www.f-secure.com/en/home/support/security-advisories/cve-2022-28872https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28872
cveCVE-2022-28872CVE-2022-28872
cve_assigned16493688001649368800
cve_cnaF-SecureF-Secure
date1652306400 (05/12/2022)1652306400 (05/12/2022)
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_auNN
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcCC
cvss2_vuldb_eNDND
cvss2_vuldb_rlNDND
cvss3_vuldb_eXX
cvss3_vuldb_rlXX
cvss3_cna_basescore4.34.3
cvss2_vuldb_basescore7.57.5
cvss2_vuldb_tempscore7.57.5
cvss3_vuldb_basescore6.36.3
cvss3_vuldb_tempscore6.36.3
cvss3_meta_basescore5.35.3
cvss3_meta_tempscore5.35.3
price_0day$0-$5k$0-$5k
cve_nvd_summaryA vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.

Might our Artificial Intelligence support you?

Check our Alexa App!