CVE-2023-28360

Published: May 11, 2023Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user.

Affected (1)

Products: Brave: Brave

Brave

1 product

Brave

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Brave Brave	Before 1.48.171

Related CWEs

CWE-223

Omission of Security-relevant Information

The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.

References (2)

https://hackerone.com/reports/1848062

Source: support@hackerone.com

Third Party Advisory

https://hackerone.com/reports/1848062

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.