CVE-2020-7369
Yandex Browser Address Bar Spooofing
- State
- Published
- Severity
- 4.3 Medium
- Published
- Oct 20, 2020
- Updated
- Sep 17, 2024
- Reserved
- Jan 21, 2020
Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version 20.8.4 released October 1, 2020.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | rapid7 |
Weaknesses
- CWE-451 User Interface (UI) Misrepresentation of Critical Information
Affected Products
| Product | Versions |
|---|---|
Yandex BrowserYandex |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.