CVE-2021-22929

EPSS 0.4%CWE-312

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

31 Aug 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

Affected products

n/a · https://github.com/brave/brave-core

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://hackerone.com/reports/1249056