CVE-2018-6608

CWE-200 — Information Exposure3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.5%
top 33.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Opera Browser
Timeline
PublishedMar 28
Latest updateMay 14

Description

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶NVDopera/opera_browser51.0.2830.55

🔴Vulnerability Details

2
GHSA
GHSA-qjf3-7m2g-x594: In the WebRTC component in Opera 51↗2022-05-14
▶
CVEList
CVE-2018-6608: In the WebRTC component in Opera 51↗2018-03-28
▶