CVE-2021-22916

2021-07-1210:22:31

CWE-200

hackerone

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension’s proxy settings, resulting in possible information disclosure.

CNA Affected

[
  {
    "product": "https://github.com/brave/brave-core",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 1.26.60"
      }
    ]
  }
]

References

hackerone.com/reports/1203842