Description
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.
Unscored
CVE-2013-1639
EUVD-2013-1670GHSA-jxcx-gjqg-4rgj
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection m…
Published Feb 8, 2013 · Updated Aug 6, 2024 · Assigned by mitre