Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-4694 — Link Following in Browser

CWE-59 — Link Following4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
17.3%
top 4.94%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Opera Browser
Timeline
PublishedOct 23
Latest updateMay 17

Description

Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDopera/opera_browser9.60+55

🔴Vulnerability Details

2
GHSA
GHSA-qgqr-xgpp-pcg3: Unspecified vulnerability in Opera before 9↗2022-05-17
▶
CVEList
CVE-2008-4694: Unspecified vulnerability in Opera before 9↗2008-10-23
▶

💥Exploits & PoCs

1
Exploit-DB
Opera Web Browser 8.51 - URI redirection Remote Code Execution↗2008-10-08
▶
CVE-2008-4694 — Link Following in Opera Browser | cvebase