CVE-2017-8458: Brave

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site.

Affected products

• Brave Brave: version 0.12.4 only

Published 2017-05-03. Last modified 2026-06-17.