CVE-2007-1115

Description

The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

Risk Information

Base Score

6.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.832

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Opera 9.20	Windows
Vulnerability CVE-2007-1115,CVE-2007-2809 are affected in Opera 9.20	Windows
Multiple vulnerabilities affected in Opera 9.20 (For Ubuntu)	Linux
Multiple vulnerabilities affected in Opera 9.20 (For Debian)	Linux
Multiple vulnerabilities affected in Opera 9.20 (For Centos)	Linux
Multiple vulnerabilities affected in Opera 9.20 (For RedHat)	Linux
Multiple vulnerabilities affected in Opera 9.20 (For Suse)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234