CVEvulnerability

CVE-2014-0815

4.3 MEDIUM Published 2014-02-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.

Affected configurations

• opera opera browser (<= 17.00) • opera opera browser 1.00 • opera opera browser 10.00 • opera opera browser 10.01 • opera opera browser 10.10 • opera opera browser 10.11 • opera opera browser 10.20 • opera opera browser 10.50 • opera opera browser 10.51 • opera opera browser 10.52 • opera opera browser 10.53 • opera opera browser 10.54 • opera opera browser 10.60 • opera opera browser 10.61 • opera opera browser 10.62 • opera opera browser 10.63 • opera opera browser 11.00 • opera opera browser 11.01 • opera opera browser 11.10 • opera opera browser 11.11 • opera opera browser 11.50 • opera opera browser 11.51 • opera opera browser 11.52 • opera opera browser 11.52.1100 • opera opera browser 11.60 • opera opera browser 11.61 • opera opera browser 11.62 • opera opera browser 11.64 • opera opera browser 11.65 • opera opera browser 11.66 • opera opera browser 11.67 • opera opera browser 12.00 • opera opera browser 12.01 • opera opera browser 12.02 • opera opera browser 12.10 • opera opera browser 12.11 • opera opera browser 12.12 • opera opera browser 12.13 • opera opera browser 12.14 • opera opera browser 12.15 • opera opera browser 15.00 • opera opera browser 16.00

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References