Cross site request forgery (csrf)

2016-10-2618:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.2%

JSON

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.

CPENameOperatorVersion
yandex_browserle16.6.1.30165

CPE	Name	Operator	Version
	yandex_browser	le	16.6.1.30165

References

www.securityfocus.com/bid/93924

browser.yandex.com/security/changelogs/