Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.
Advisories
Source ID Title
EUVD EUVD EUVD-2008-4183 Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T10:08:34.950Z

Reserved: 2008-09-23T00:00:00

Link: CVE-2008-4200

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2008-09-27T10:30:03.507

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-4200

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses