CVE-2021-22929

Description

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS Score

Exploitation Probability

0.024

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-22929 are affected in Brave (x64) 1.28.9	Windows
Vulnerabilities CVE-2021-22929 are affected in Brave (User Based) 1.28.9	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234