Medium severity4.3NVD Advisory· Published Oct 20, 2020· Updated Jun 17, 2026

CVE-2020-7370

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Danyil Vasilenko/Bolt Browserllm-fuzzy2 versions
<=1.4+ 1 more
- (no CPE)range: <=1.4
- (no CPE)range: 1.4
Boltbrowser/Bolt Browser
cpe:2.3:a:boltbrowser:bolt_browser:*:*:*:*:*:iphone_os:*:*
Range: <=1.4

Patches

Vulnerability mechanics

References

blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/nvdExploitMitigationThird Party Advisory
www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000