Description (CNA)
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yandex N.V. / Yandex Browser for desktop | affected before 16.6 for OSx and Windows |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.