{"id":"CVE-2017-8458","details":"Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site.","modified":"2026-10-22T02:47:27.216642901Z","published":"2017-05-03T14:59:00.197Z","database_specific":{},"references":[{"type":"FIX","url":"https://github.com/brave/browser-laptop/issues/4748"},{"type":"EVIDENCE","url":"https://hackerone.com/reports/175529"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/brave/browser-laptop","events":[{"introduced":"777dfea57c15ad0b536c48bafa2e95fa4de31cf7"},{"last_affected":"777dfea57c15ad0b536c48bafa2e95fa4de31cf7"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:brave:brave:0.12.4:*:*:*:*:*:*:*","range":[{"introduced":"0.12.4"},{"last_affected":"0.12.4"}]}]}}],"versions":["0.12.4","v0.12.4dev-RC1","v0.12.4dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8458.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"}]}