Skip to content
OpenAdvisories
Unscored CVE-2021-22916 EUVD-2021-10045GHSA-x7j4-9cp2-wmh8

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adbloc…

Published Jul 12, 2021 · Updated Aug 3, 2024 · Assigned by hackerone

Description

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.

Affected products

VendorProductAffectedFixed
— https://github.com/brave/brave-core Fixed in 1.26.60 —

References