CVE-2012-3558

2012-06-1419:00:00

mitre

www.cve.org

opera

vulnerability

address field

spoofing

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

71.9%

JSON

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.