Vulnerability · Published Jan 21, 2025 · Assigned by hackerone
CVE-2025-23086
Medium 6.1
In plain English
A medium-severity open redirect in Desktop Browser from Brave. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However the origin was not correctly inferred in some cases. When combined with an open redirector vulnerability on a trusted site, this could allow a malicious site to initiate a download whose origin in the file select dialog appears as the trusted site which initiated the redirect.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Brave | Desktop Browser | 1.74.48 – before 1.74.48 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N