Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/bravecontentbrowserclient.cc and browser/ui/webui/bravewebuicontroller_factory.cc.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52263.json"
}{
"source": [
"DESCRIPTION",
"CPE_RANGE"
],
"cpe": "cpe:2.3:a:brave:browser:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.59.40"
}
]
}{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.59.40"
}
],
"cpe": "cpe:2.3:a:brave:browser:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE"
}