WebUI Factory Schema Limitation in Brave Browser by Brave Software
CVE-2023-52263

6.1MEDIUM

Key Information:

Vendor

Brave Software

Status
Brave Browser
Vendor
CVE Published:
30 December 2023

What is CVE-2023-52263?

The Brave Browser prior to version 1.59.40 is affected by a vulnerability involving inadequate restrictions on the schema used for the WebUI factory and redirects. This issue arises in key components of the browser, specifically within 'brave_content_browser_client.cc' and 'brave_web_ui_controller_factory.cc'. Attackers could exploit this flaw to potentially manipulate the way the browser handles user interface elements, leading to unintended consequences.

References

https://github.com/brave/brave-browser/issues/32449
https://github.com/brave/brave-core/pull/19820
https://github.com/brave/brave-core/pull/19820/commits/9d...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.