CVE-2018-20483 aka user.xdg.origin.url - Githubissues

brave / browser-laptop

[DEPRECATED] Please see https://github.com/brave/brave-browser for the current version of Brave

https://www.brave.com

Other

7.95k stars 975 forks source link

CVE-2018-20483 aka user.xdg.origin.url #15344

Closed rastislavcore closed 5 years ago

rastislavcore commented 5 years ago

Troubleshooting checklist

There's a good chance the bug you're about to report is fixed in the new version of Brave

Download latest version of Brave from https://brave.com/download/
Import your data by navigating to brave://settings/importData

If you'd like to continue for this old version, please check the applicable items:

[x] Yes I did try the new version
[x] I believe this issue is critical for users (security issue, bug that prevents folks from using the software)
[x] I've read the FAQs and Common Issues section on community.brave.com (https://community.brave.com/c/common-issues)

Description

Downloaded files are saving URLs from which are downloaded into «user.xdg.origin.url» or «user.xdg.referrer.url»

Steps to Reproduce

Download file
Read with getfattr
Check if file contain location from which was downloaded

What version of Brave are you using?

Using Brave, navigate to about:brave
Under "Version information", you'll see the version (ex: 0.25.2)
Click the clipboard icon to copy the product details and paste here

Version 0.58.17 Chromium: 71.0.3578.98 (Official Build) (64-bit)

bsclifton commented 5 years ago

Closing in favor of https://github.com/brave/brave-browser/issues/2766 which is tracking this in the new repo

@raisty can you please add some additional info in that version of the issue? Thanks! 😄