Renwax23

Visiting a malicious website may lead to address bar spoofing due to inadequate checks.

An inconsistent user interface issue existed due to improper state management. Visiting a malicious website could potentially lead to user interface spoofing.

Visiting a malicious website may lead to address bar spoofing.

The issue allows a website to bypass Same Origin Policy. This was addressed through improved state management.

The issue is related to an incorrect restriction of visualizable layers in the user interface component of the affected operating systems and browser. Visiting a malicious website may lead to user interface spoofing, potentially allowing a remote attacker to gain unauthorized access to confidential data.

Visiting a malicious website may lead to address bar spoofing. The issue was addressed by adding additional logic.

An incorrect security user interface issue in the Omnibox (the browser's address bar) allows a remote attacker to spoof the contents of the URL bar. This is achieved by using a specially crafted domain name, specifically utilizing two Right-to-Left (RTL) Arabic character subdomains to mislead the user.

The issue concerns Querybook, an open source data querying UI. In affected versions, user-provided data is not escaped in the error field of the auth callback URL in `querybook/server/app/auth/oauth auth.py` and `querybook/server/app/auth/okta auth.py`. This may allow attackers to perform reflected cross-site scripting (XSS) if Content Security Policy (CSP) is not enabled or `unsafe-inline` is allowed.