CVE-2021-22929

2021-08-3116:53:26

CWE-312

hackerone

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.0%

JSON

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

CNA Affected

[
  {
    "product": "https://github.com/brave/brave-core",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.28.62"
      }
    ]
  }
]

References

hackerone.com/reports/1249056