CVE-2022-28869— Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-28869
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
F-Secure SAFE 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F-secure F-Secure SAFE是芬兰F-secure公司的一套杀毒软件。 F-Secure SAFE 8.6 版本及之前版本存在安全漏洞，该漏洞源于浏览器没有显示完整的 URL，例如端口号。恶意制作的网站可以通过地址栏欺骗进行网络钓鱼攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F-Secure | F-Secure Mobile Security | 18.6 ~ All Version | - |
II. Public POCs for CVE-2022-28869
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-28869
请登录查看更多情报信息。
- https://www.f-secure.com/en/home/support/security-advisoriesx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-28869
Same Patch Batch · F-Secure · 2022-04-15 · 3 CVEs total
| CVE-2022-28868 | 4.3 MEDIUM | Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android |
| CVE-2022-28870 | 4.3 MEDIUM | Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android |
IV. Related Vulnerabilities
Same product: F-Secure Mobile Security
- CVE-2022-28873
Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE - CVE-2022-28872
Address Bar Spoofing Vulnerability in F-Secure SAFE Browser - CVE-2022-28868
Address Bar Spoofing Vulnerability in F-Secure SAFE Browser - CVE-2022-28870
Address Bar Spoofing Vulnerability in F-Secure SAFE Browser - CVE-2021-40835
URL Address Bar Spoofing in F-Secure SAFE Browser for iOS
V. Comments for CVE-2022-28869
No comments yet