CVE-2020-7369

Katalog CVE

CVSS 4.3 · Medium EPSS 0,99%

Kerentanan User Interface (UI) Misrepresentation of Critical Information pada yandex browser. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version 20.8.4 released October 1, 2020.

Rincian

Terbit di NVD

20 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information
CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,99% peluang dieksploitasi; lebih tinggi dari 61,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ exploit · mitigasi · advisory pihak ketiga
• https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html exploit · advisory pihak ketiga