Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that use Tor as a proxy. Brave does NOT implement most of the privacy protections from Tor Browser."
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NBrave
APPBrave< 1.34
Powiązane podatności
In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with ...
An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 w...
Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windo...
Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file th...
Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file th...