Denial of service(POP UP Recursion) on Brave browser
Medium
B
Brave Software
Submitted None
Actions:
Reported by
sahiltikoo
Vulnerability Details
Technical details and impact analysis
## Summary:
Basically I have found a denial of service attack on brave browser in Linux platform.In this bug when we open the __html file or visiting (www.tiks.host-ed.me)__ then click on __pop up dos.html__ ,(which contains a recurring pop up code),the Pop up freezes the entire browser window except for minimize button and on maximizing it hangs, we can't close any tabs neither using (Ctrl+w) to close current tab that is causing recursion. This is a known issue and in past has been already addressed in browsers such as _Google Chrome_, however Brave Browser is still affected by the issue.And in _safari browser_ Pop up's come after some time delays that allows user to stop the running process by clicking on (X) in URL.
##Attack Scenario :-
This can be exploited by an attacker just by sending this __html file or visiting (www.tiks.host-ed.me)__ to victim through email or any other source and when victim will open the html file in his/her Brave browser their window will freeze and they would need to kill the process in Linux(kill -9 pid) or (End Task) in windows. So to avoid such misuse of the issue some patches must be made.
>The vulnerability occurred due to mishandling of location.reload function, as it keeps reloading the >document, however the issue more likely is present inside of not limiting the pop ups or simply offering no >way to ignore further prompts.
## Products affected:
_Brave browser(0.11.6) on Linux platform_
## Steps To Reproduce:
1.) Got o www.tiks.host-ed.me then click on __pop up dos.html__ file or You can open the html code i have attached below on brave browser.
2.) You will see pop up like :-
{F131446}
And while in Google chrome this effect is limited by offering a checkbox to prevent the current document from creating additional dialogs. Like as shown below :-
{F131451}
## Supporting Material/References:
I have attached POC images and html code that you will require in resolving the above issue.
Thanks
sahiltikoo
Report Details
Additional information and metadata
State
Closed
Substate
Duplicate
Submitted
Weakness
Uncontrolled Resource Consumption