CVE-2008-4200

Published Sep 27, 2008 CVSS 2.0 · 6.4 Medium EPSS 3.2% KEV · Not listed
Description
Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-4183 Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:08 AM
Reserved
Sep 23, 2008, 12:00 AM
Status
Modified
Published
Sep 27, 2008, 10:30 AM
Modified
Jun 16, 2026, 10:57 PM