CVE-2010-2661

Published Jul 7, 2010 CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Description
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-2665 Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:39 AM
Reserved
Jul 7, 2010, 12:00 AM
Status
Modified
Published
Jul 8, 2010, 12:54 PM
Modified
Jun 16, 2026, 11:21 PM