{"id":"CVE-2021-45884","published":"2021-12-27T21:31:48Z","modified":"2024-08-04T04:54:30Z","title":"In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS…","vendor":null,"product":null,"tier":"tail","description":{"text":"In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0315,"percentile":0.87895,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/brave/brave-core/pull/10742","tags":["x_refsource_MISC"]},{"url":"https://github.com/brave/brave-browser/issues/19070","tags":["x_refsource_MISC"]},{"url":"https://github.com/brave/brave-browser/issues/20079","tags":["x_refsource_MISC"]},{"url":"https://hackerone.com/reports/1377864","tags":["x_refsource_MISC"]}],"priority":{"score":17.6,"factors":[{"name":"EPSS percentile","points":17.58}]},"euvd":{"id":"EUVD-2021-32600","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-brave-browser-cve-2021-21323","parents":[{"from":"CVE-2021-21323","to":"CVE-2021-45884","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.","from":"CVE.org","in":"CVE-2021-45884"}]},{"from":"CVE-2021-22916","to":"CVE-2021-45884","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.","from":"CVE.org","in":"CVE-2021-45884"}]}]}}