CVE-2010-4047 in Web Browser

Summary

Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 10/21/2010
• Disclosure: 10/21/2010
• Moderation: VulDB entry created
• Entries: VDB-55220 (1)
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00501
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-4047
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-4047
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-4047/