CVE-2018-12448

2018-08-0213:00:00

CWE-20

naver

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser’s address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name.

CNA Affected

[
  {
    "product": "Whale Browser",
    "vendor": "NAVER Corporation",
    "versions": [
      {
        "lessThan": "1.3.48.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

cve.naver.com/detail/cve-2018-12448.html