An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A remote attacker can leverage this to perform address bar spoofing attack.
References
Configurations
History
21 Nov 2024, 06:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - Vendor Advisory | |
| References | () https://www.f-secure.com/en/business/support-and-downloads/security-advisories - Vendor Advisory | |
| References | () https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33594 - Vendor Advisory |
19 Aug 2021, 18:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other | |
| CPE | cpe:2.3:a:f-secure:safe:*:*:*:*:*:android:*:* | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 3.5 |
| References | (MISC) https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33594 - Vendor Advisory | |
| References | (MISC) https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - Vendor Advisory | |
| References | (MISC) https://www.f-secure.com/en/business/support-and-downloads/security-advisories - Vendor Advisory |
11 Aug 2021, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-08-11 11:15
Updated : 2024-11-21 06:09
NVD link : CVE-2021-33594
Mitre link : CVE-2021-33594
CVE.ORG link : CVE-2021-33594
JSON object : View
Products Affected
f-secure
- safe
CWE