5

CVE-2008-4199

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

Data is provided by the National Vulnerability Database (NVD)
OperaOpera Browser Version <= 9.51
OperaOpera Browser Version5.0
OperaOpera Browser Version5.0 Updatebeta2
OperaOpera Browser Version5.0 Updatebeta3
OperaOpera Browser Version5.0 Updatebeta4
OperaOpera Browser Version5.0 Updatebeta5
OperaOpera Browser Version5.0 Updatebeta6
OperaOpera Browser Version5.0 Updatebeta7
OperaOpera Browser Version5.0 Updatebeta8
OperaOpera Browser Version5.02
OperaOpera Browser Version5.10
OperaOpera Browser Version5.11
OperaOpera Browser Version5.12
OperaOpera Browser Version6.0
OperaOpera Browser Version6.0 Updatebeta1
OperaOpera Browser Version6.0 Updatebeta2
OperaOpera Browser Version6.0 Updatebeta3
OperaOpera Browser Version6.0 Updatetp1
OperaOpera Browser Version6.0 Updatetp2
OperaOpera Browser Version6.0 Updatetp3
OperaOpera Browser Version6.1
OperaOpera Browser Version6.01
OperaOpera Browser Version6.1 Updatebeta1
OperaOpera Browser Version6.02
OperaOpera Browser Version6.03
OperaOpera Browser Version6.04
OperaOpera Browser Version6.05
OperaOpera Browser Version6.06
OperaOpera Browser Version6.11
OperaOpera Browser Version6.12
OperaOpera Browser Version7.0
OperaOpera Browser Version7.0 Updatebeta1
OperaOpera Browser Version7.0 Updatebeta1_v2
OperaOpera Browser Version7.0 Updatebeta2
OperaOpera Browser Version7.01
OperaOpera Browser Version7.02
OperaOpera Browser Version7.03
OperaOpera Browser Version7.10
OperaOpera Browser Version7.10 Updatebeta1
OperaOpera Browser Version7.11
OperaOpera Browser Version7.11 Updatebeta2
OperaOpera Browser Version7.20
OperaOpera Browser Version7.20 Updatebeta7
OperaOpera Browser Version7.21
OperaOpera Browser Version7.22
OperaOpera Browser Version7.23
OperaOpera Browser Version7.50
OperaOpera Browser Version7.50 Updatebeta1
OperaOpera Browser Version7.51
OperaOpera Browser Version7.52
OperaOpera Browser Version7.53
OperaOpera Browser Version7.54
OperaOpera Browser Version7.54 Updateupdate1
OperaOpera Browser Version7.54 Updateupdate2
OperaOpera Browser Version7.60
OperaOpera Browser Version8.0
OperaOpera Browser Version8.0 Updatebeta1
OperaOpera Browser Version8.0 Updatebeta2
OperaOpera Browser Version8.0 Updatebeta3
OperaOpera Browser Version8.01
OperaOpera Browser Version8.02
OperaOpera Browser Version8.50
OperaOpera Browser Version8.51
OperaOpera Browser Version8.52
OperaOpera Browser Version8.53
OperaOpera Browser Version8.54
OperaOpera Browser Version9.0
OperaOpera Browser Version9.0 Updatebeta1
OperaOpera Browser Version9.0 Updatebeta2
OperaOpera Browser Version9.01
OperaOpera Browser Version9.02
OperaOpera Browser Version9.10
OperaOpera Browser Version9.12
OperaOpera Browser Version9.20
OperaOpera Browser Version9.20 Updatebeta1
OperaOpera Browser Version9.21
OperaOpera Browser Version9.22
OperaOpera Browser Version9.23
OperaOpera Browser Version9.24
OperaOpera Browser Version9.25
OperaOpera Browser Version9.26
OperaOpera Browser Version9.27
OperaOpera Browser Version9.50
OperaOpera Browser Version9.50 Updatebeta1
OperaOpera Browser Version9.50 Updatebeta2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.83% 0.735
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.