CVE-2016-9473

Опубликовано: 28 мар. 2017

Источник: nvd

CVSS3: 4.7

CVSS2: 4.3

EPSS Низкий

Описание

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.

Ссылки

http://www.securityfocus.com/bid/97155
Third Party Advisory
VDB Entry
https://cxsecurity.com/issue/WLB-2017010042
Exploit
Third Party Advisory
https://github.com/brave/browser-ios/pull/504
Broken Link
https://hackerone.com/reports/175958
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/97155
Third Party Advisory
VDB Entry
https://cxsecurity.com/issue/WLB-2017010042
Exploit
Third Party Advisory
https://github.com/brave/browser-ios/pull/504
Broken Link
https://hackerone.com/reports/175958
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:brave:browser:*:*:*:*:*:iphone_os:*:*

Версия до 1.2.18 (исключая)

cpe:2.3:a:brave:browser:*:*:*:*:*:android:*:*

Версия до 1.9.56 (исключая)

EPSS

Процентиль: 79%

0.01211

Низкий

4.7 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-451

CWE-79

Связанные уязвимости

CVE-2016-9473

CVSS3: 4.7

debian

почти 9 лет назад

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and e ...

GHSA-93xm-4rmr-qw86

CVSS3: 4.7

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01211

Низкий

4.7 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-451

CWE-79