CVE-2023-52263

漏洞描述

Brave Browser在1.59.40版本之前未正确限制WebUI工厂和重定向的模式。这与browser/brave_content_browser_client.cc和browser/ui/webui/brave_web_ui_controller_factory.cc相关。

安全风险CVSS等级评估

基础分数	风险等级	可利用性评分
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

细节文章

CVSS scores for CVE-2023-52263:https://github.com/brave/brave-browser/issues/32473
CWE ids for CVE-2023-52263:https://github.com/brave/brave-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9
References for CVE-2023-52263:https://github.com/brave/brave-core/pull/19820
Products affected by CVE-2023-52263:https://github.com/brave/brave-browser/issues/32449