Security Advisory

CVE-2013-3210

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-04-19 10:00:00
Last updated 2024-09-16 23:15:57
Assigner mitre
State PUBLISHED

Description

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.