PT-2018-5228 · Brave · Brave Browser

Pes10Ko · Publicado 2018-01-03 · Atualizado 2019-10-03 · CVE-2017-1000461

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brave Browser versions 0.19.73 and earlier

Description The issue is related to an incorrect access control problem in the "JS fingerprinting blocking" component. This allows a malicious website to access browser functionality that is intended to be blocked, specifically the fingerprinting-associated features.

Recommendations For versions 0.19.73 and earlier, update to a version that includes the fix for the incorrect access control issue in the "JS fingerprinting blocking" component.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-1000461

Produtos afetados

Brave Browser

Referências · 3

• https://github.com/brave/browser-laptop/issues/11683#issuecomment-339835601 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000461 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000461 · Aviso do Fabricante