Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.
| Software | From | Fixed in |
|---|---|---|
| opera / opera_browser | - | 7.54 |