地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabled
download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabled
其他弱点
/
Unlabeled
/ #1848062
厂商
Brave Software
严重程度
中危
赏金
—
弱点
Unlabeled
研究员
@ameenbasha
披露日期
2023-05-10
资产
https://laptop-updates.brave.com/latest/winx64
CVE
CVE-2023-28360
该报告还没有中文解读。
时间线
2023-01-26
报告提交
2023-05-10
公开披露
阅读 HackerOne 原文 ↗
作者 @ameenbasha · 版权归作者与 Brave Software 所有
同类报告
June 2022 Incident Report
HackerOne · 2022-07-01
HTML-injection in PDF-export leads to LFI
Visma Public · — · $500
DOM XSS on duckduckgo.com search
DuckDuckGo · 2020-06-14
An attacker can archive and unarchive any structured scope object on HackerOne
HackerOne · 2022-04-18
Java (Maven): Actually fix the use of insecure protocol to download/upload artifacts
GitHub Security Lab · — · $4,000
Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's origin
Superhuman (formerly Grammarly) · 2019-08-01