Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-8504

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
yandex

Description

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yandex N.V. Yandex Browser for desktop

  • before 16.6 for OSx and Windowsaffected

References