← Database

CVE-2010-2661

MEDIUM CVSS: 4.3 Published: 2010-07-08 Modified: 2026-06-16

Description

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.

Affected Platforms

Microsoft WindowsOpera Opera BrowserUnix UnixApple Mac Os X

Weakness Type

CWE-264

References