MEDIUM🇬🇧 English

CVE-2023-28360

CVSS 4.3v3.1pub. 2023-05-11upd. 2025-01-27

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Brave
APP
Brave
< 1.48.171

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

CWE-223

NVD-CWE-Other

Referencje

hackerone.com/reports/1848062…

Powiązane podatności

CVE-2021-45884HIGH7.5ten sam produkt

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with ...

CVE-2022-47933MEDIUM6.5ten sam produkt

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file th...

CVE-2022-47932MEDIUM6.5ten sam produkt

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file th...

CVE-2022-47934MEDIUM6.5ten sam produkt

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windo...

CVE-2022-30334MEDIUM5.3ten sam produkt

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origi...