Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-09-27 03:30
Updated : 2017-08-07 18:32
NVD link : CVE-2008-4199
Mitre link : CVE-2008-4199
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
opera
- opera_browser