Unscored CVE-2016-8504 EUVD-2016-9352GHSA-f23v-9crx-ggxj

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in brow…

Published Oct 26, 2016 · Updated Aug 6, 2024 · Assigned by yandex

Vendor: Yandex N.V. Product: Yandex Browser for Desktop

Description

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.

Affected products

Vendor	Product	Affected	Fixed
Yandex N.V.	Yandex Browser for desktop	before 16.6 for OSx and Windows	—

References

93924 vdb-entry
https://browser.yandex.com/security/changelogs/