PT-2012-3658
CVE-2012-1926
·
Published
2012-03-27
·
Updated
2018-01-06
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Opera versions prior to 11.62
Description
The issue allows remote attackers to bypass the Same Origin Policy via the
history.pushState and history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.Recommendations
For Opera versions prior to 11.62, update to version 11.62 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾