PT-2017-18348 · Brave · Brave

Ajdumanhug · Publicado 2017-05-03 · Atualizado 2019-10-03 · CVE-2017-8458

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brave version 0.12.4

Description The issue is related to URI Obfuscation, where a string such as https://[e-mail]/ is displayed without clear UI indication that it is not a resource on the safe.example.com web site.

Recommendations For version 0.12.4, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2017-8458

Produtos afetados

Brave

Referências · 4

• 🔥 https://hackerone.com/reports/175529 · Exploit
• https://github.com/brave/browser-laptop/issues/4748 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-8458 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-8458 · Aviso do Fabricante