Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5w5v-4m3m-w7hq

Опубликовано: 31 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

EPSS

Процентиль: 16%
0.00052
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-565

Связанные уязвимости

CVSS3: 6.5
nvd
3 месяца назад

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

CVSS3: 6.5
debian
3 месяца назад

In Brave Browser Desktop versions prior to 1.83.10 that have the split ...

EPSS

Процентиль: 16%
0.00052
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-565