CVE-2025-48980

6.5MEDIUM

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore Sa

发布于: 10/31/2025更新于: 12/1/2025
在NVD查看在MITRE查看

描述

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

AI分析AI驱动

参考资料