6.3 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.3%
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.