7.5

CVE-2003-0593

Exploit

Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.

Data is provided by the National Vulnerability Database (NVD)
Opera ≫ Opera Browser Version5.0
Opera ≫ Opera Browser Version5.02
Opera ≫ Opera Browser Version5.10
Opera ≫ Opera Browser Version5.11
Opera ≫ Opera Browser Version5.12
Opera ≫ Opera Browser Version6.0
Opera ≫ Opera Browser Version6.01
Opera ≫ Opera Browser Version6.02
Opera ≫ Opera Browser Version6.03
Opera ≫ Opera Browser Version6.04
Opera ≫ Opera Browser Version6.05
Opera ≫ Opera Browser Version6.06
Opera ≫ Opera Browser Version6.10
Opera ≫ Opera Browser Version7.0
Opera ≫ Opera Browser Version7.0 Updatebeta1
Opera ≫ Opera Browser Version7.0 Updatebeta2
Opera ≫ Opera Browser Version7.01
Opera ≫ Opera Browser Version7.02
Opera ≫ Opera Browser Version7.03
Opera ≫ Opera Browser Version7.10
Opera ≫ Opera Browser Version7.11
Opera ≫ Opera Browser Version7.20
Opera ≫ Opera Browser Version7.21
Opera ≫ Opera Browser Version7.22
Opera ≫ Opera Browser Version7.23
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.15% 0.317
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.