Lucene search
K

Brave Software: Local files reading from the web using `brave://`

🗓️ 03 Aug 2018 02:40:34Reported by metnewType 
hackerone
 hackerone
🔗 hackerone.com👁 14 Views

Brave Software introduced `brave://` protocol to replace `AsarProtocolHandler` in `brave/muon`. However, a severe bug allows reading local files from the web by using `brave://` instead of `file://`. Products affected include Brave 0.23.73, V8 6.8.275.24, rev 50bdb6df42550dd14f5636770ec8585aa26e361b, Muon 8.0.3, OS Release 17.7.0, Update Channel: Release, OS Architecture: x64, OS Platform: macOS, Node.js 7.9.0, Brave Sync v1.4.2, and libchromiumcontent 68.0.3440.75

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation