CVE-2020-7370

User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions.
Configurations

Configuration 1 (hide)

cpe:2.3:a:boltbrowser:bolt_browser:*:*:*:*:*:iphone_os:*:*

History

21 Nov 2024, 05:37

Type Values Removed Values Added
References () https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - Exploit, Mitigation, Third Party Advisory () https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - Exploit, Mitigation, Third Party Advisory
References () https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html - Exploit, Third Party Advisory () https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html - Exploit, Third Party Advisory

Information

Published : 2020-10-20 17:15

Updated : 2024-11-21 05:37


NVD link : CVE-2020-7370

Mitre link : CVE-2020-7370

CVE.ORG link : CVE-2020-7370


JSON object : View

Products Affected

boltbrowser

  • bolt_browser
CWE
CWE-451

User Interface (UI) Misrepresentation of Critical Information

CWE-306

Missing Authentication for Critical Function