CVE-2008-5681

Published Dec 19, 2008 CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Description
Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-5652 Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:04 AM
Reserved
Dec 19, 2008, 12:00 AM
Status
Modified
Published
Dec 19, 2008, 4:30 PM
Modified
Jun 16, 2026, 11:00 PM