Medium · 6.5 CVE-2022-47932 EUVD-2022-50666GHSA-7g3f-6r3q-3qmq

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipn…

Published Dec 24, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Description

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.

References

https://github.com/brave/brave-core/commit/e73309665508c17e48a67e302d3ab02a38d3ef50
https://github.com/brave/brave-core/pull/14211
https://github.com/brave/brave-browser/issues/24093
https://hackerone.com/reports/1636430