CVE-2017-1000461

2022-10-0316:23:10

mitre

www.cve.org

brave browser

version 0.19.73

incorrect access control

js fingerprinting blocking

vulnerability

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

Brave Software’s Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the “JS fingerprinting blocking” component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block).

References

github.com/brave/browser-laptop/issues/11683#issuecomment-339835601