← Back

CVE-2010-2661

nvd nist
Published: Jul 8, 2010Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.

Affected (109)

Products: Opera: Opera Browser
1 product
Opera Browser
Configuration A
20 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Opera
Version 10.50
Version 10.51
Version 5.02
Version 5.10
Version 5.11
Version 5.12
Version 6.04
Version 6.05
Version 6.06
Version 7.01
Version 7.02
Version 7.03
Version 7.0
Version 7.0 beta1
Version 7.0 beta1_v2
Version 7.0 beta2
Version 7.10
Version 7.60
Version 8.53
Version 9.12
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Opera
Up to 10.53
Version 10.01
Version 10.50 beta1
Version 10.52
Version 10.52 beta1
Version 10.52 beta2
Version 6.0 beta3
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Configuration C
82 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Opera
Up to 10.60
Version 10.00
Version 10.00 beta1
Version 10.00 beta2
Version 10.00 beta3
Version 10.10
Version 10.10 beta1
Version 10.11
Version 10.53 b
Version 5.0
Version 5.0 beta2
Version 5.0 beta3
Version 5.0 beta4
Version 5.0 beta5
Version 5.0 beta6
Version 5.0 beta7
Version 5.0 beta8
Version 6.01
Version 6.02
Version 6.03
Version 6.0
Version 6.0 beta1
Version 6.0 beta2
Version 6.0 tp1
Version 6.0 tp2
Version 6.0 tp3
Version 6.11
Version 6.12
Version 6.1
Version 6.1 beta1
Version 7.10 beta1
Version 7.11
Version 7.11 beta2
Version 7.20
Version 7.20 beta7
Version 7.21
Version 7.22
Version 7.23
Version 7.50
Version 7.50 beta1
Version 7.51
Version 7.52
Version 7.53
Version 7.54
Version 7.54 update1
Version 7.54 update2
Version 8.01
Version 8.02
Version 8.0
Version 8.0 beta1
Version 8.0 beta2
Version 8.0 beta3
Version 8.50
Version 8.51
Version 8.52
Version 8.54
Version 9.01
Version 9.02
Version 9.0
Version 9.0 beta1
Version 9.0 beta2
Version 9.10
Version 9.20
Version 9.20 beta1
Version 9.21
Version 9.22
Version 9.23
Version 9.24
Version 9.25
Version 9.26
Version 9.27
Version 9.50
Version 9.50 beta1
Version 9.50 beta2
Version 9.51
Version 9.52
Version 9.60
Version 9.60 beta1
Version 9.61
Version 9.62
Version 9.63
Version 9.64
Running on/withPlatform Versions
Unix
Unix
All versions

Related CWEs

References (18)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.