CVE-2024-25677: 
Homebrew vulnerability analysis and mitigation

CVE-2024-25677 affects Min browser versions before 1.31.0. The vulnerability was discovered and disclosed on February 9, 2024, impacting the browser's security origin handling for local files (GitHub Advisory). The vulnerability has been assigned a CVSS v3.1 base score of 8.8 HIGH (NVD).

The vulnerability stems from incorrect treatment of local files as unique security origins in Min browser. This implementation flaw allows local files to improperly request cross-origin resources. For example, a local file can request other local files through an XML document, bypassing intended security restrictions. The issue specifically occurs when a local file is opened inside Min and does not affect http(s) URLs (GitHub Advisory).

The vulnerability has been assessed with a CVSS v3.1 base score of 8.8 (HIGH), indicating significant potential impact. The scoring vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) suggests that the vulnerability can lead to high impacts on confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability has been patched in Min browser version 1.31.0. Users are advised to upgrade to this version or later to mitigate the security risk (GitHub Advisory).