CVE-2022-47932

MEDIUM 6.5CVE-2022-47932 · Published 24/12/2022 · updated 17/06/2026

In short

CVE-2022-47932 is a MEDIUM (CVSS 6.5) vulnerability affecting brave (brave).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.1% of all vulnerabilities.
Fix: update to 1.42.51 or later.

Package	Affected versions	Patched versions
brave brave	`< 1.42.51`	`1.42.51`

Description

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.

References

brave/brave-browser · Exploit
brave/brave-core commit e733096 · Patch
brave/brave-core#14211 · Patch
hackerone.com/reports/1636430 · Permissions Required

More vulnerabilities in brave

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

brave

< 1.42.51

1.42.51

More vulnerabilities in brave

See all →