Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
2009-08-31T16:30:06.937
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | opera | opera_browser | ≤ 9.52 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.23 | Yes |
| Application | opera | opera_browser | 7.53 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.60 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.01 | Yes |
| Application | opera | opera_browser | 8.02 | Yes |
| Application | opera | opera_browser | 8.50 | Yes |
| Application | opera | opera_browser | 8.51 | Yes |
| Application | opera | opera_browser | 8.52 | Yes |
| Application | opera | opera_browser | 8.53 | Yes |
| Application | opera | opera_browser | 8.54 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.01 | Yes |
| Application | opera | opera_browser | 9.02 | Yes |
| Application | opera | opera_browser | 9.10 | Yes |
| Application | opera | opera_browser | 9.12 | Yes |
| Application | opera | opera_browser | 9.20 | Yes |
| Application | opera | opera_browser | 9.21 | Yes |
| Application | opera | opera_browser | 9.22 | Yes |
| Application | opera | opera_browser | 9.51 | Yes |
| Application | opera | opera_browser | 10.00 | Yes |