CVE-2004-2260 — Open Redirect in Browser

CWE-601 — Open RedirectCWE-368 — Context Switching Race Condition4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.9%
top 24.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedDec 31
Latest updateApr 29

Description

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.osvdb.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f5p6-mp58-4cv2: Opera Browser 7↗2022-04-29
▶
CVEList
CVE-2004-2260: Opera Browser 7↗2005-07-19
▶

📐Framework References

1
CWE
Context Switching Race Condition↗
▶
CVE-2004-2260 — Open Redirect in Opera Browser | cvebase