CVE-2008-5681

No fix known EPSS 1%

Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.

Published 2008-12-19 · CVE record · OSV

Products: opera_browser