CVE-2008-4697
- State
- Published
- Severity
- Not scored
- Published
- Oct 23, 2008
- Updated
- Aug 7, 2024
- Reserved
- Oct 22, 2008
Description
The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 32394third-party-advisory
- http://www.opera.com/docs/changelogs/mac/961/
- ADV-2008-2873vdb-entry
- [oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixesmailing-list
- 32538third-party-advisory
- 32299third-party-advisory
- http://www.opera.com/docs/changelogs/solaris/961/
- [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixesmailing-list
- opera-fastforward-xss(46004)vdb-entry
- http://www.opera.com/docs/changelogs/windows/961/
- http://www.opera.com/docs/changelogs/linux/961/
- SUSE-SR:2008:022vendor-advisory
- http://www.opera.com/docs/changelogs/freebsd/961/
- http://www.opera.com/support/search/view/904/
- 31842vdb-entry
- GLSA-200811-01vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.