CNNVD-202512-1480 Information

CNNVD ID

CNNVD-202512-1480

CVE-2025-5469

  • CNNVD Published: 2025-12-09

Description (Chinese)

Yandex Messenger是俄罗斯Yandex公司的一个即时通讯应用程序。 Yandex Messenger 2.245之前版本存在安全漏洞,该漏洞源于搜索路径元素控制不当,可能导致搜索顺序劫持。

Description (English)

Yandex Messenge is an instant communication application of Yandex. There was a security loophole in the previous version of Yandex Messenge 2.245, which stemmed from inadequate control of the search path elements, which could lead to a search sequence hijacking.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Yandex

Published

2025-12-09

Last Modified

2026-02-24

References

https://yandex.com/bugbounty/i/hall-of-fame-products

Share on: