medium4.3
CVE-2016-8504
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Impact
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yandex | Yandex Browser | through 16.6.1.30165 |