CNNVD-202512-1477 Information

CNNVD ID

CNNVD-202512-1477

CVE-2025-5470

  • CNNVD Published: 2025-12-09

Description (Chinese)

Yandex Disk是俄罗斯Yandex公司的一个云存储服务。 Yandex Disk 3.2.45.3275之前版本存在安全漏洞,该漏洞源于搜索路径元素控制不当,可能导致搜索顺序劫持。

Description (English)

Yandex Disk is a cloud storage service for Yandex. The previous version of Yandex Disk 3.2.45.3275 had a security loophole, which stemmed from inadequate control of the search path element and could lead to a search sequence hijacking.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Yandex

Published

2025-12-09

Last Modified

2026-02-24

References

https://yandex.com/bugbounty/i/hall-of-fame-products

Share on: