CVE-2010-5072

2022-10-0316:21:03

mitre

www.cve.org

javascript implementation

opera 10.5

getcomputedstyle method

sensitive information

remote attackers

web pages

5.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

JSON

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

References

w2spconf.com/2010/papers/p26.pdf