CVE Vulnerabilities

CVE-2023-28360

Omission of Security-relevant Information

Published: May 11, 2023 | Modified: Jan 27, 2025
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user.

Weakness

The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.

Affected Software

Name Vendor Start Version End Version
Brave Brave * 1.48.171 (excluding)

References