Opera prior to 12.13 does not send CORS preflight requests in all required cases, which allows remote malicious users to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
opera opera browser 12.10 |
||
opera opera browser 12.01 |
||
opera opera browser 12.02 |
||
opera opera browser 12.11 |
||
opera opera browser 12.00 |
||
opera opera browser |