PT-2023-21671 · Brave · Brave

Ameenbasha · Publicado 2023-05-11 · Atualizado 2023-05-22 · CVE-2023-28360

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Brave desktop versions prior to 1.48.171

Description An omission of security-relevant information issue exists when a user saves a file, as there is no download safety check dialog presented to the user.

Recommendations For versions prior to 1.48.171, update to version 1.48.171 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-223

Identificadores relacionados

CVE-2023-28360

Produtos afetados

Brave

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-28360 · Nota de Segurança
• https://hackerone.com/reports/1848062 · Nota
• https://t.me/cvenotify/50282 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-28360 · Aviso do Fabricante