In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.
References
| Link | Resource |
|---|---|
| https://hackerone.com/reports/3253725 |
Configurations
No configuration.
History
31 Oct 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-31 00:15
Updated : 2025-10-31 00:15
NVD link : CVE-2025-48980
Mitre link : CVE-2025-48980
CVE.ORG link : CVE-2025-48980
JSON object : View
Products Affected
No product.
CWE
No CWE.