Skip to main content

Brave CVE-2022-47932

MEDIUM
Uncontrolled Resource Consumption (CWE-400)
2022-12-24 cve@mitre.org
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 24, 2022 - 22:15 nvd
MEDIUM 6.5

DescriptionNVD

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.

AnalysisAI

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933. Affected products include: Brave. Version information: before 1.43.34.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.

More in Brave

View all
CVE-2021-45884 HIGH POC
7.5 Dec 27

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fa

CVE-2017-8458 MEDIUM POC
6.5 May 03

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displ

CVE-2022-47934 MEDIUM POC
6.5 Dec 24

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a c

CVE-2022-47933 MEDIUM POC
6.5 Dec 24

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that referen

CVE-2018-10799 MEDIUM POC
6.5 May 08

A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). Rated medium severity (CVSS 6.5), this vuln

CVE-2018-10798 MEDIUM POC
6.5 May 08

A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). Rated medium severity (CVSS 6.5), this vuln

CVE-2023-28364 MEDIUM POC
6.1 Jul 01

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android

CVE-2023-22798 MEDIUM POC
6.1 Feb 09

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interc

CVE-2021-22929 MEDIUM POC
6.1 Aug 31

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that i

CVE-2020-8276 MEDIUM POC
5.5 Nov 09

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the times

CVE-2017-8459 MEDIUM POC
5.3 May 03

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. Rat

CVE-2022-30334 MEDIUM POC
5.3 May 07

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers.

Share

CVE-2022-47932 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy