CVE-2013-3210

Opera < 12.15 - Unauthorized Sensitive Information Exposure via Set-Cookie Header

Title source: llm
STIX 2.1

Description

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.opera.com/security/advisory/1047
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/unified/1215/

Scores

EPSS 0.0023
EPSS Percentile 45.7%

Details

CWE
CWE-200
Status published
Products (27)
opera/opera_browser 3.00 (2 CPE variants)
opera/opera_browser 3.10
opera/opera_browser 3.21
opera/opera_browser 3.50
opera/opera_browser 3.51
opera/opera_browser 3.60
opera/opera_browser 3.61
opera/opera_browser 3.62 (2 CPE variants)
opera/opera_browser 4.00 (6 CPE variants)
opera/opera_browser 4.01
... and 17 more
Published Apr 19, 2013
Tracked Since Feb 18, 2026