Denial of Service Vulnerability in Brave Browser Versions Prior to 1.43.88
CVE-2022-47934

6.5MEDIUM

Key Information:

Vendor

Brave

Status
Brave
Vendor
CVE Published:
24 December 2022

What is CVE-2022-47934?

A vulnerability exists in Brave Browser versions before 1.43.88 that can allow remote attackers to trigger a denial of service in private and guest windows. This can be exploited using a specially crafted HTML file that contains an 'ipfs://' or 'ipns://' URL. This flaw is a result of an incomplete fix for earlier vulnerabilities, leading to potential disruption of browser functionality for users.

References

https://github.com/brave/brave-core/commit/82d8e39043e691...
https://github.com/brave/brave-browser/issues/24211
https://github.com/brave/brave-browser/issues/25106

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.