Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
- https://cxsecurity.com/issue/WLB-2017010042
- https://hackerone.com/reports/175958
No PoCs found on GitHub currently.