Lucene search

K
cve[email protected]CVE-2010-0653
HistoryFeb 18, 2010 - 6:00 p.m.

CVE-2010-0653

2010-02-1818:00:00
CWE-200
web.nvd.nist.gov
28
opera
security
vulnerability
css
cross-origin
information exposure

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

Affected configurations

NVD
Node
operaopera_browser

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%