243182 – www-client/opera Stored Cross Site Scripting Vulnerability

Bug 243182 - www-client/opera Stored Cross Site Scripting Vulnerability

Summary: www-client/opera Stored Cross Site Scripting Vulnerability

Status:	RESOLVED DUPLICATE of bug 243060

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://archives.neohapsis.com/archive...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2008-10-22 08:28 UTC by Paweł Hajdan, Jr. (RETIRED)
Modified:	2008-10-22 09:27 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2008-10-22 08:28:05 UTC

Another advisory link: http://www.security-assessment.com/files/advisories/20
08-10-22_Opera_Stored_Cross_Site_Scripting.pdf 

== Issue Details ==

Opera browser is vulnerable to stored Cross Site
Scripting. A malicious attacker is able to inject
arbitrary browser content through the
websites visited with the Opera browser. The code
injection is rendered into the Opera History Search
page which displays URL and a short
description of the visited pages.

Comment 1 Robert Buchholz (RETIRED) gentoo-dev

2008-10-22 09:27:17 UTC

This is fixed in 9.61, no?

*** This bug has been marked as a duplicate of bug 243060 ***