CVE-2013-1639

Published: Feb 8, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.

Affected (8)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Up to 12.12
Opera Opera Browser	Version 12.00
Opera Opera Browser	Version 12.00 beta
Opera Opera Browser	Version 12.01
Opera Opera Browser	Version 12.02
Opera Opera Browser	Version 12.10
Opera Opera Browser	Version 12.10 beta
Opera Opera Browser	Version 12.11