Open Redirect in Opera Browser

CVE-2004-2260

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.

Vulnerability class: Open Redirect

EPSS: 0.028 (84.7th percentile) — read the EPSS interpretation.

Affected products

Opera Opera_browser
N/a — versions n/a

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, Patch, vdb-entry, Broken Link)
cve@mitre.org (x_refsource_MISC, Broken Link, Vendor Advisory)
cve@mitre.org (Patch, x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)