CVE-2013-1639
08.02.2013, 11:58
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.
CSRF
| Vendor | Product | Version |
|---|---|---|
| opera | opera_browser | 𝑥 ≤ 12.12 |
| opera | opera_browser | 12.00 |
| opera | opera_browser | 12.00 |
| opera | opera_browser | 12.01 |
| opera | opera_browser | 12.02 |
| opera | opera_browser | 12.10 |
| opera | opera_browser | 12.10 |
| opera | opera_browser | 12.11 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References