CVE-2022-28873 MEDIUM

CVE-2022-28873: Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

Vendor F-Secure
Product F-Secure Mobile Security
Published May 12, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.

Key dates

02Disclosure timeline

May 12, 2022 CVE published
August 3, 2024 Record updated