PT-2021-7164
CVE-2020-27969
·
Published
2021-09-13
·
Updated
2021-09-22
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Yandex Browser for Android version 20.8.4
Description
The issue is related to shortcomings in the data source confirmation mechanism, allowing remote attackers to bypass the Same-Origin Policy (SOP) and spoof the address bar. This can enable a remote attacker to fake the content of the address bar.
Recommendations
For Yandex Browser for Android version 20.8.4, update to a newer version to mitigate the risk of SOP bypass and address bar spoofing.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾