CVE-2022-28873 - Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

Back Back to CVE browser

MEDIUM

Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

Published May 12, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.58%

Description

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.

Affected products

Vendor F-Secure Product F-Secure Mobile Security Default
unknown
Affected
- 19.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
F-Secure	F-Secure Mobile Security	unknown	Affected 19.0

Remediation

Vendor solution

FIX : A fix has been released in the automatic update channel since 3rd May 2022. No user action is required.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33310
Advisory
https://www.f-secure.com/en/home/support/security-advisories
x_refsource_MISCVendor Advisory
https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28873
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33310		Advisory
https://www.f-secure.com/en/home/support/security-advisories		x_refsource_MISCVendor Advisory
https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28873		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner F-SecureUS

Published May 12, 2022

Updated Aug 3, 2024

Reserved Apr 8, 2022

Link CVE-2022-28873

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-28873

Red Hat

No data

ENISA EUVD

Assigner F-SecureUS

Published May 12, 2022

Updated Aug 3, 2024

Link EUVD-2022-33310

GitHub

No data