CVE-2017-8459

2017-05-0314:00:00

mitre

github.com

AI Score

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) the display of web-search results

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:brave:brave:0.12.4:*:*:*:*:*:*:*"
    ],
    "vendor": "brave",
    "product": "brave",
    "versions": [
      {
        "status": "affected",
        "version": "0.12.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

hackerone.com/reports/175701