PT-2021-7164
CVE-2020-27969
·
تاريخ النشر
2021-09-13
·
تاريخ التحديث
2021-09-22
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Yandex Browser for Android version 20.8.4
Description
The issue is related to shortcomings in the data source confirmation mechanism, allowing remote attackers to bypass the Same-Origin Policy (SOP) and spoof the address bar. This can enable a remote attacker to fake the content of the address bar.
Recommendations
For Yandex Browser for Android version 20.8.4, update to a newer version to mitigate the risk of SOP bypass and address bar spoofing.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾