XSS on internal: privileged origin through reader mode

跨站脚本 / XSS（通用） / #1438028

厂商

Brave Software

严重程度

中危 · CVSS 7.1

赏金

—

弱点

XSS（通用）

研究员

@nishimunea

披露日期

2023-06-22

资产

https://github.com/brave/brave-ios

CVE

—

该报告还没有中文解读。

Brave iOS has two weaknesses described below. By combining them, XSS can be achieved on the privileged origin `internal://local`.