CVE-2016-8504: CSRF
Published Oct 26, 2016
·Updated
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Affected Software
1 affected component
Yandex Yandex Browser<=16.6.1.30165
Event History
Oct 26, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-8504?
CVE-2016-8504 is classified as a medium-level severity vulnerability.
2
How do I fix CVE-2016-8504?
To fix CVE-2016-8504, update Yandex Browser to version 16.6.2 or later.
3
What does CVE-2016-8504 exploit?
CVE-2016-8504 exploits cross-site request forgery (CSRF) vulnerabilities in Yandex Browser.
4
What data could be compromised due to CVE-2016-8504?
CVE-2016-8504 could be used to steal saved data in the browser profile.
5
Which versions of Yandex Browser are affected by CVE-2016-8504?
Yandex Browser versions prior to 16.6.2 are affected by CVE-2016-8504.