| Package | Affected versions | Patched versions |
|---|---|---|
| opera browser | = 7.0= 7.23= 7.53= 7.54= 7.60= 8.0= 8.01= 8.02= 8.50= 8.51= 8.52= 8.53= 8.54= 9.0= 9.01= 9.02= 9.10= 9.12= 9.20= 9.21≤ 9.22 |
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free