PT-2011-5028
CVE-2011-4682
·
Published
2011-12-07
·
Updated
2012-03-06
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Opera versions prior to 11.60
Description
The issue is related to the improper implementation of the
in operator in the JavaScript engine, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via vectors related to variables on different web sites.Recommendations
For versions prior to 11.60, update to version 11.60 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾