CVE-2023-52263

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/brave_content_browser_client.cc and browser/ui/webui/brave_web_ui_controller_factory.cc.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/brave/brave-browser/issues/32449Issue Tracking, Patch
https://github.com/brave/brave-browser/issues/32473Issue Tracking, Patch
https://github.com/brave/brave-core/pull/19820Issue Tracking, Patch
https://github.com/brave/brave-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9Patch
https://github.com/brave/brave-browser/issues/32449Issue Tracking, Patch
https://github.com/brave/brave-browser/issues/32473Issue Tracking, Patch
https://github.com/brave/brave-core/pull/19820Issue Tracking, Patch
https://github.com/brave/brave-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9Patch

Timeline

Published: Dec 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-522646.1The beesblog (aka Bees Blog) component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharing_url is m CVE-2023-522655.4IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update CVE-2023-522667.5ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trig CVE-2023-522677.5ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.CVE-2023-522689.1The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session t CVE-2023-522694.8MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule. This might allow domain administrators to con CVE-2023-52279.8Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.CVE-2023-522716.5The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via a CVE-2023-522746.1member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.CVE-2023-522752.1Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.enc CVE-2023-522777.8Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have CVE-2023-52284.8The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could allow high-privilege us