CVE-2004-2260

2005-07-1904:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%

JSON

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.

References

secunia.com/advisories/11532

secunia.com/secunia_research/2004-2/advisory/

www.osvdb.org/6108

www.securityfocus.com/bid/10337

exchange.xforce.ibmcloud.com/vulnerabilities/16131