Security feature bypass

2011-12-0719:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

JSON

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

CPENameOperatorVersion
opera_browsereq10.50

CPE	Name	Operator	Version
	opera_browser	eq	10.50

References

w2spconf.com/2010/papers/p26.pdf