CVE-2013-3210

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging…

published April 19, 2013

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01667 · 76.6th percentile
Published
2013-04-19T10:00Z
EPSS history
Timeline
  • 19 APR 10:00Z
    Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging…
    cvelistv5