Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
{
"unresolved_ranges": [
{
"source": "CPE_RANGE",
"cpes": [
"cpe:2.3:a:brave:browser:*:*:*:*:*:iphone_os:*:*"
],
"vendor_product": "brave:browser",
"extracted_events": [
{
"fixed": "1.2.18"
},
{
"fixed": "1.2.18"
}
]
}
]
}{
"cpe": [
"cpe:2.3:a:brave:browser:*:*:*:*:*:iphone_os:*:*",
"cpe:2.3:a:brave:browser:*:*:*:*:*:android:*:*"
],
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.2.18"
},
{
"fixed": "1.9.56"
}
]
}{
"cpe": [
"cpe:2.3:a:brave:browser:*:*:*:*:*:iphone_os:*:*",
"cpe:2.3:a:brave:browser:*:*:*:*:*:android:*:*"
],
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.2.18"
},
{
"fixed": "1.9.56"
}
]
}