Address Bar Spoofing Vulnerability in Yandex Browser

CVE-2017-7325

What is CVE-2017-7325?

A vulnerability in Yandex Browser prior to version 16.9.0 allows remote attackers to exploit the window.open functionality, potentially leading to address bar spoofing. This issue can mislead users by displaying a deceptive URL in the browser's address bar while navigating to malicious sites. Users of affected versions are encouraged to update their browsers to ensure protection against this type of attack. For more detailed information, refer to the official Yandex security changelogs.

References