opera_mini Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/opera_mini/ Sun, 26 Feb 2023 06:46:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png opera_mini Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/opera_mini/ 32 32 CVE-2018-16135 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16135/ Sun, 26 Feb 2023 06:46:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16135/ The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site.

The post CVE-2018-16135 appeared first on CVE Vulnerability.

]]> The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site.

The post CVE-2018-16135 appeared first on CVE Vulnerability.

]]> CVE-2021-23253 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23253/ Thu, 23 Feb 2023 14:07:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23253/ Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part (e.g. www.safe.opera.com…) The exact amount depends on the phone screen size but the […]

The post CVE-2021-23253 appeared first on CVE Vulnerability.

]]> Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part (e.g. www.safe.opera.com…) The exact amount depends on the phone screen size but the attacker can craft a number of different domains and target different phones. Starting with version 53.1 Opera Mini displays long URLs with the top-level domain label aligned to the right of the address field which mitigates the issue.

The post CVE-2021-23253 appeared first on CVE Vulnerability.

]]>