cbcvebase.
CVE-2008-4200
published 2008-09-27

CVE-2008-4200: Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to…

PriorityP428medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EPSS
3.18%
86.5th percentile
Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.

Affected

54 ranges· showing 25
VendorProductVersion rangeFixed in
operaopera_browser<= 9.51—
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.