PT-2017-18348
CVE-2017-8458
·
Published
2017-05-03
·
Updated
2019-10-03
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Brave version 0.12.4
Description
The issue is related to URI Obfuscation, where a string such as
https://safe.example.com@unsafe.example.com/ is displayed without clear UI indication that it is not a resource on the safe.example.com web site.Recommendations
For version 0.12.4, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾