Medium severity6.1NVD Advisory· Published Dec 30, 2023· Updated Jun 17, 2026

CVE-2023-52263

Description

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/brave_content_browser_client.cc and browser/ui/webui/brave_web_ui_controller_factory.cc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Brave/Browser2 versions
cpe:2.3:a:brave:browser:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:brave:browser:*:*:*:*:*:*:*:*range: <1.59.40
- (no CPE)range: <1.59.40
Brave Browser/Brave Browsercpe-rescue

Patches

Vulnerability mechanics

References

github.com/brave/brave-browser/issues/32449nvdIssue TrackingPatch
github.com/brave/brave-browser/issues/32473nvdIssue TrackingPatch
github.com/brave/brave-core/pull/19820nvdIssue TrackingPatch
github.com/brave/brave-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000