CVE-2012-1926

Published Mar 28, 2012 CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Description
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-1935 Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 7:17 PM
Reserved
Mar 27, 2012, 12:00 AM
Status
Modified
Published
Mar 28, 2012, 3:22 AM
Modified
Jun 16, 2026, 11:40 PM