Brave Software · Report #179121
Information disclosure of website
Informativestatus
highseverity
3upvotes
16 Nov 2016disclosed
How it was found
NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty.
Summary:
Malicious application can see what the user is browsing [add summary of the vulnerability]
Products affected:
BRave browser for android
- operating system, Brave version or Brave website page, etc. Android Version Os : 4.4, App version:1.9.56
Steps To Reproduce:
1)Open adb shell 2)ps | grep "app process id" 3)logcat *:D | grep "process id of app"
YOu will see all the url that the user is browsing
- List the steps needed to reproduce the vulnerability
Supporting Material/References:
- List any additional material (e.g. screenshots, logs, etc.) http://www.androidsecurity.guru/category/logging/