Skip to content
OpenAdvisories
Unscored CVE-2009-4071 EUVD-2009-4042GHSA-f383-hh72-jgh8

Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read…

Published Nov 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors.

References