CVE-2008-5681

2008-12-19T16:30:00
ID CVE-2008-5681
Type cve
Reporter cve@mitre.org
Modified 2012-06-07T17:24:00

Description

Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.