PT-2017-10164 · Brave · Brave Browser

Aaditya_Purani · Publicado 2017-03-28 · Atualizado 2021-03-19 · CVE-2016-9473

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Brave Browser iOS versions prior to 1.2.18 Brave Browser Android versions prior to 1.9.56

Description The issue allows attackers to trick victims by displaying a malicious page for legitimate domain names through Full Address Bar Spoofing.

Recommendations For Brave Browser iOS versions prior to 1.2.18, update to version 1.2.18 or later. For Brave Browser Android versions prior to 1.9.56, update to version 1.9.56 or later.

Exploit

Correção

XSS

UI Misrepresentation of Critical Information

Enumeração de Fraquezas

CWE-79

CWE-451

Identificadores relacionados

CVE-2016-9473

Produtos afetados

Brave Browser

Referências · 6

• 🔥 https://cxsecurity.com/issue/WLB-2017010042 · Exploit
• 🔥 https://hackerone.com/reports/175958 · Exploit
• ❌ https://github.com/brave/browser-ios/pull/504 · Nota, Deleted
• https://osv.dev/vulnerability/CVE-2016-9473 · Aviso do Fabricante
• http://securityfocus.com/bid/97155 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9473 · Nota de Segurança