Description
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yandex N.V. | Yandex Browser | All versions prior to version 16.9.0 | — |
Unscored
CVE-2017-7325
EUVD-2017-16352GHSA-g2q3-hq9h-xr8q
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
Published Jan 19, 2018 · Updated Sep 16, 2024 · Assigned by yandex