CVE-2021-25254

Summary

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Affected Software

VendorProductVersion RangeStatus
YandexBrowser Lite21.1.0affected

Weaknesses

  • CWE-116: CWE-116 Improper Encoding or Escaping of Output

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References