NAVER Whale browser iframe sandbox bypass in dual-tab environment
Web pages can break out of their security box in this browser.
Summary
An attacker can bypass the iframe sandbox in a dual-tab environment. NAVER Whale browser versions before 5.39.412.57 are affected.
Affected when
- dual-tab environment
What to do
Update to version 5.39.412.57 or later.
Products and platforms
CVE IDs
Sources
- Advisory: cve.naver.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen