CVE-2022-24073: 
Homebrew vulnerability analysis and mitigation

The Web Request API in Whale browser before version 3.12.129.18 contained a vulnerability (CVE-2022-24073) that was disclosed on March 17, 2022. The vulnerability allowed attackers to deny access to the extension store or redirect users to any URL when they attempted to access the store (NAVER Advisory).

The vulnerability has a CVSS v3.1 Base Score of 7.1 (High), with an Impact Score of 3.7 and Exploitability Score of 2.8. The attack vector is Network-based, requires Low attack complexity, needs No privileges, but does require User Interaction. The scope is Changed, with Low impact on Confidentiality, Integrity, and Availability (AttackerKB).

When exploited, this vulnerability could allow attackers to interfere with users' access to the browser's extension store and potentially redirect users to malicious websites. This could lead to denial of service of the extension store functionality and possible exposure to malicious content through unauthorized redirects (NAVER Advisory).

The vulnerability has been patched in Whale browser version 3.12.129.18 and later. Users should upgrade to the latest version of the browser to mitigate this security risk (NAVER Advisory).