CVE-2008-5681

Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2008-12-19

Last modified

2024-08-07

Affected products

• Opera Browser (Opera)

References

• http://secunia.com/advisories/34294
• http://security.gentoo.org/glsa/glsa-200903-30.xml
• http://www.opera.com/docs/changelogs/linux/963/
• http://www.opera.com/support/kb/view/923/
• http://www.securitytracker.com/id?1021461