CVE-2003-0593

Opera Browser - Cookie Access Restriction Bypass via URL-Encoded Path Traversal

Title source: llm

Description

Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.

References (2)

Core 2

Core References

Not Applicable mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html

Broken Link, Exploit, Vendor Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html

Scores

EPSS 0.0030

EPSS Percentile 53.5%

Details

CWE

CWE-22

Status published

Products (23)

opera/opera_browser 5.0

opera/opera_browser 5.02

opera/opera_browser 5.10

opera/opera_browser 5.11

opera/opera_browser 5.12

opera/opera_browser 6.0

opera/opera_browser 6.01

opera/opera_browser 6.02

opera/opera_browser 6.03

opera/opera_browser 6.04

... and 13 more

Published Apr 15, 2004

Tracked Since Feb 18, 2026