Lucene search
HistoryDec 24, 2022 - 10:15 p.m.
CVE-2022-47932
brave browser
denial of service
crafted html file
ipfs
ipns
incomplete fix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.002 Low
EPSS
Percentile
61.7%
Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.
Affected configurations
Node
bravebraveRange<1.42.51
Related
osv
osv
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-12-24 22:15:00
Design/Logic Flaw
2022-12-24 22:15:00
Design/Logic Flaw
2022-12-24 22:15:00
cve
cve
nvd
nvd
CVE-2022-47933
2022-12-24 22:15:09
CVE-2022-47934
2022-12-24 22:15:09
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.002 Low
EPSS
Percentile
61.7%
Related for NVD:CVE-2022-47932