VulnerabilityModified
CVE-2012-1926
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
MEDIUM 5.0EPSS 2.53%
Does this matter?
Lower severity and a low EPSS score (2.53%). Track it; it rarely justifies an emergency change on its own.
Description
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.53% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- opera/opera browser
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html
- http://osvdb.org/80622
- http://secunia.com/advisories/48535
- http://www.opera.com/docs/changelogs/mac/1162/
- http://www.opera.com/docs/changelogs/unix/1162/
- http://www.opera.com/docs/changelogs/windows/1162/
- http://www.opera.com/support/kb/view/1012/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74351
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html
- http://osvdb.org/80622
- http://secunia.com/advisories/48535
- http://www.opera.com/docs/changelogs/mac/1162/
- http://www.opera.com/docs/changelogs/unix/1162/
- http://www.opera.com/docs/changelogs/windows/1162/
- http://www.opera.com/support/kb/view/1012/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74351
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.