CVE-2021-33592

Summary: CVE-2021-33592 affects NAVER Toolbar prior to 4.0.30.323. A crafted upgrade.xml file can enable remote code execution. The root cause is that special characters in the filename parameter can bypass the code-signing check, allowing execution of arbitrary code. Publicly cited sources (Red ...