CVE-2005-1475

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-1475
The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/15008 Broken Link Patch Vendor Advisory
http://secunia.com/secunia_research/2005-4/advisory/ Broken Link Patch Vendor Advisory
http://www.securityfocus.com/bid/13970 Broken Link Third Party Advisory VDB Entry
http://secunia.com/advisories/15008 Broken Link Patch Vendor Advisory
http://secunia.com/secunia_research/2005-4/advisory/ Broken Link Patch Vendor Advisory
http://www.securityfocus.com/bid/13970 Broken Link Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:57

Type Values Removed Values Added
References () http://secunia.com/advisories/15008 - Broken Link, Patch, Vendor Advisory () http://secunia.com/advisories/15008 - Broken Link, Patch, Vendor Advisory
References () http://secunia.com/secunia_research/2005-4/advisory/ - Broken Link, Patch, Vendor Advisory () http://secunia.com/secunia_research/2005-4/advisory/ - Broken Link, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/13970 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/13970 - Broken Link, Third Party Advisory, VDB Entry

28 Feb 2022, 18:51

Type Values Removed Values Added
References (SECUNIA) http://secunia.com/advisories/15008 - Patch, Vendor Advisory (SECUNIA) http://secunia.com/advisories/15008 - Broken Link, Patch, Vendor Advisory
References (MISC) http://secunia.com/secunia_research/2005-4/advisory/ - Patch, Vendor Advisory (MISC) http://secunia.com/secunia_research/2005-4/advisory/ - Broken Link, Patch, Vendor Advisory
References (BID) http://www.securityfocus.com/bid/13970 - (BID) http://www.securityfocus.com/bid/13970 - Broken Link, Third Party Advisory, VDB Entry
CPE cpe:2.3:a:opera_software:opera_web_browser:8.0_final_build_1095:*:*:*:*:*:*:* cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other CWE-601
Information

Published : 2005-06-16 04:00

Updated : 2024-11-20 23:57

NVD link : CVE-2005-1475

Mitre link : CVE-2005-1475

CVE.ORG link : CVE-2005-1475

JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')