CVE-2025-23086

creationtimestamp| type| source ---|---|--- 2025-01-21 05:01:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2375 2025-01-21 05:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lga3vmk7l62j 2025-01-21 05:54:06+00:00| seen|...

CVE-2025-23086

Brave Browser versions 1.70.x through 1.73.x on most desktop platforms contain a vulnerability where the site origin is incorrectly inferred in the OS-provided file selector dialog during file uploads or downloads. An attacker can exploit this by using an open redirector on a trusted site to init...