HexBrain

Brave Software · Report #179121

Information disclosure of website

Informativestatus
highseverity
3upvotes
16 Nov 2016disclosed

How it was found

NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty.

Summary:

Malicious application can see what the user is browsing [add summary of the vulnerability]

Products affected:

BRave browser for android

  • operating system, Brave version or Brave website page, etc. Android Version Os : 4.4, App version:1.9.56

Steps To Reproduce:

1)Open adb shell 2)ps | grep "app process id" 3)logcat *:D | grep "process id of app"

YOu will see all the url that the user is browsing

  • List the steps needed to reproduce the vulnerability

Supporting Material/References:

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original