CVEvulnerability

CVE-2016-9473

4.7 MEDIUM Published 2017-03-28 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-03-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses: CWE-451, CWE-79

Description

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.

Affected configurations

• brave browser (< 1.2.18) • brave browser (< 1.9.56)

Weakness · CWE (2)

CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

http://www.securityfocus.com/bid/97155 Third Party Advisory, VDB Entry
https://cxsecurity.com/issue/WLB-2017010042 Exploit, Third Party Advisory
https://github.com/brave/browser-ios/pull/504 Broken Link
https://hackerone.com/reports/175958 Exploit, Vendor Advisory
http://www.securityfocus.com/bid/97155 Third Party Advisory, VDB Entry
https://cxsecurity.com/issue/WLB-2017010042 Exploit, Third Party Advisory
https://github.com/brave/browser-ios/pull/504 Broken Link
https://hackerone.com/reports/175958 Exploit, Vendor Advisory

CVE-2016-9473

Description

Affected configurations

Related

Weakness · CWE (2)

References