CVEvulnerability

CVE-2021-22929

6.1 MEDIUM Published 2021-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-312, CWE-532

Description

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

Affected configurations

• brave brave (< 1.28.62)

Related

Weakness · CWE (2)

  • CWE-312 Cleartext Storage of Sensitive Information weakness
  • CWE-532 Insertion of Sensitive Information into Log File weakness

References