PT-2018-5228 · Brave · Brave Browser

Pes10Ko · Published 2018-01-03 · Updated 2019-10-03 · CVE-2017-1000461

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brave Browser versions 0.19.73 and earlier

Description The issue is related to an incorrect access control problem in the "JS fingerprinting blocking" component. This allows a malicious website to access browser functionality that is intended to be blocked, specifically the fingerprinting-associated features.

Recommendations For versions 0.19.73 and earlier, update to a version that includes the fix for the incorrect access control issue in the "JS fingerprinting blocking" component.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2017-1000461

Affected Products

Brave Browser

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000461 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000461 · Vendor Advisory
• https://github.com/brave/browser-laptop/issues/11683#issuecomment-339835601 · Note