CVE-2022-30334

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers

published May 7, 2022

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that use Tor as a proxy. Brave does NOT implement most of the privacy protections from Tor Browser."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02679 · 85.7th percentile
Published
2022-05-07T04:29Z
EPSS history
Timeline
  • 07 MAY 04:29Z
    Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers
    cvelistv5