CVE-2021-33592 - AskarLabs CVE Database

CVE-2021-33592

Vendor Naver

Product NAVER Toolbar

Weakness CWE-20 · Input validation

Published July 19, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.

Key dates

02Disclosure timeline

July 19, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-33592

Related vulnerabilities

04Related CVE

CVE-2023-0359 ipv6: Missing ipv6 nullptr-check in handle_ra_input CVE-2025-25210 CVE-2023-23934 Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass CVE-2020-15234 Redirect URL matching ignores character casing CVE-2026-21282 Adobe Commerce | Improper Input Validation (CWE-20)