CVE-2021-40835

Name of the Vulnerable Software and Affected Versions Safe Browser for iOS (affected versions not specified)

Description A URL address bar spoofing issue was discovered. When a user clicks on a specially crafted malicious URL, they may be tricked into thinking the content comes from a valid domain, while it actually comes from another. This is done by using a very long username part of the URL, so the user cannot see the domain name. A remote attacker can leverage this to perform a URL address bar spoofing attack.

Recommendations For all affected versions, the fix is that the browser no longer shows the username part in the address bar.