Yandex Browser prior to 20.10.0 allows remote malicious users to spoof the address bar
yandex yandex browser