| Package | Affected versions | Patched versions |
|---|---|---|
| opera browser | = 1.00= 2.00= 2.10= 2.12= 3.00= 3.10= 3.21= 3.50= 3.51= 3.60= 3.61= 3.62= 4.00= 4.01= 4.02= 5.0= 5.02= 5.10= 5.11= 5.12= 6.0= 6.01= 6.02= 6.03= 6.04= 6.05= 6.06= 6.1= 6.11= 6.12= 7.0= 7.01= 7.02= 7.03= 7.10= 7.11= 7.20= 7.21= 7.22= 7.23= 7.50= 7.51= 7.52= 7.53= 7.54= 7.60= 8.0= 8.01= 8.02= 8.50= 8.51= 8.52= 8.53= 8.54= 9.0= 9.01= 9.02= 9.10= 9.12= 9.20= 9.21= 9.22= 9.23≤ 9.24 |
Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free