MEDIUM🇵🇱 Wersja polska

CVE-2022-47933

CVSS 6.5v3.1pub. 2022-12-24upd. 2025-04-15

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequest_IPFSRedirectWork() in ipfs_redirect_network_delegate_helper.cc.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Brave

    APP
    Brave
    < 1.42.51
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-45884HIGH7.5ten sam produkt

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with ...

CVE-2023-28360MEDIUM4.3ten sam produkt

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 w...

CVE-2022-47934MEDIUM6.5ten sam produkt

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windo...

CVE-2022-47932MEDIUM6.5ten sam produkt

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file th...

CVE-2022-30334MEDIUM5.3ten sam produkt

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origi...