CVE-2004-2260

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.

Ссылки

http://secunia.com/advisories/11532
Broken Link
Patch
Vendor Advisory
http://secunia.com/secunia_research/2004-2/advisory/
Broken Link
Vendor Advisory
http://www.osvdb.org/6108
Broken Link
Patch
http://www.securityfocus.com/bid/10337
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16131
Third Party Advisory
VDB Entry
http://secunia.com/advisories/11532
Broken Link
Patch
Vendor Advisory
http://secunia.com/secunia_research/2004-2/advisory/
Broken Link
Vendor Advisory
http://www.osvdb.org/6108
Broken Link
Patch
http://www.securityfocus.com/bid/10337
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16131
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 7.50 (исключая)

EPSS

Процентиль: 85%

0.02759

Низкий

5 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-f5p6-mp58-4cv2

github

больше 4 лет назад