CVE-2012-1926

No fix known EPSS 3%

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.

Published 2012-03-28 · CVE record · OSV

Products: opera_browser