CVE-2021-22916 — n/a / https://github.com/brave/brave-core

CVE-2021-22916

n/a / https://github.com/brave/brave-core PUBLISHED

Description (CNA)

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.

Affected (CNA)

Vendor / product	Versions
n/a / https://github.com/brave/brave-core	affected Fixed in 1.26.60

CWE

CWE-200

References

https://hackerone.com/reports/1203842

ADP enrichment

CVE

No English description supplied.

https://hackerone.com/reports/1203842