Total vulnerabilities in the database
Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected.
| Software | From | Fixed in |
|---|---|---|
| opera / opera_browser | 7.23 | 7.23.x |
| opera / opera_browser | 9.02 | 9.02.x |
| opera / opera_browser | 7.53 | 7.53.x |
| opera / opera_browser | 8.50 | 8.50.x |
| opera / opera_browser | 9.51 | 9.51.x |
| opera / opera_browser | 8.53 | 8.53.x |
| opera / opera_browser | 9.12 | 9.12.x |
| opera / opera_browser | 8.0 | 8.0.x |
| opera / opera_browser | - | 9.52.x |
| opera / opera_browser | 8.54 | 8.54.x |
| opera / opera_browser | 8.02 | 8.02.x |
| opera / opera_browser | 9.20 | 9.20.x |
| opera / opera_browser | 9.21 | 9.21.x |
| opera / opera_browser | 8.51 | 8.51.x |
| opera / opera_browser | 7.60 | 7.60.x |
| opera / opera_browser | 7.54 | 7.54.x |
| opera / opera_browser | 9.22 | 9.22.x |
| opera / opera_browser | 9.01 | 9.01.x |
| opera / opera_browser | 9.0 | 9.0.x |
| opera / opera_browser | 9.10 | 9.10.x |
| opera / opera_browser | 8.52 | 8.52.x |
| opera / opera_browser | 10.00-beta_3 | 10.00-beta_3.x |
| opera / opera_browser | 8.01 | 8.01.x |
| opera / opera_browser | 7.0 | 7.0.x |