Whale browser prior to 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
navercorp whale |