CVE-2020-6158: Authentication Bypass by Spoofing

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

PT-2025-7277

Name of the Vulnerable Software and Affected Versions Opera Mini for Android versions prior to 52.2 Description The issue allows a malicious page to trick the browser into showing an address of a different page. This may enable the malicious page to impersonate another page and trick a user into...

PT-2021-15417

Name of the Vulnerable Software and Affected Versions Opera Mini for Android versions prior to 53.1 Description The issue allows a malicious attacker to craft a URL with a long domain name. For example, www.safe.opera.com.attacker.com can be used to deceive users. Since the URL is left-aligned in...

CVE-2021-23253: Undefined Security Weakness

Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part e.g. www.safe.opera.com… The exac...

CVE-2019-18624: Undefined Security Weakness

Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO aka Right to Left Override approach, as demonstrated by misinterpretation of malicious%E2%80%AEtxt.apk as maliciouskpa.txt. This affects 44.1.2254.142553, 44.1.2254.142659, and...

PT-2019-15541

Name of the Vulnerable Software and Affected Versions Opera Mini for Android versions 44.1.2254.142553 through 44.1.2254.143214 Description The issue allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO Right to Left Override approach. This can be...