MEDIUM🇵🇱 Wersja polska

CVE-2022-47934

CVSS 6.5v3.1pub. 2022-12-24upd. 2025-04-15

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Brave

    APP
    Brave
    < 1.43.88
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-45884HIGH7.5ten sam produkt

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with ...

CVE-2023-28360MEDIUM4.3ten sam produkt

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 w...

CVE-2022-47933MEDIUM6.5ten sam produkt

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file th...

CVE-2022-47932MEDIUM6.5ten sam produkt

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file th...

CVE-2022-30334MEDIUM5.3ten sam produkt

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origi...