Security Advisory

CVE-2021-45884

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-12-27 21:31:48
Last updated 2024-08-04 04:54:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.