writeups.xyz / CVE-2021-22929 – Brave Browser 1.27 and below permanently logs the server connection time for all v2 tor domains to ~/.config/BraveSoftware /Brave-Browser/tor/data/tor.log

Submitter : c2a

Date: 16 August 2021

Bounty : 400

Vulnerabilities :

• Privacy Issue
• Information Disclosure

Programs :

• Brave Software

Authors :

• Sickcodes (@Sickcodes)

Link :
https://sick.codes/sick-2021-109/