CVE-2022-47932

Updated on 24 Dec 2022

Severity

6.5 Medium severity

Details

CVSS score
6.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Overview

About vulnerability

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.

Details

Affected product:
Netty , Spring , rsocket-java
Affected packages:
Spring Boot @ 2.4.6 (+1247 more)