CVE-2002-2358: XSS
Published Dec 31, 2002
·Updated
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
Affected Software
8 affected components
Opera Software Opera Web Browser=6.0.2
Opera Software Opera Web Browser=6.0
Opera Software Opera Web Browser=6.0
Opera Software Opera Web Browser=6.0.1
Opera Software Opera Web Browser=6.0.1
Opera Software Opera Web Browser=6.0.3
Opera Software Opera Web Browser=6.0.1
Opera Software Opera Web Browser=6.0.4
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 29, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2358?
CVE-2002-2358 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2002-2358?
To fix CVE-2002-2358, upgrade to a version of the Opera web browser later than 6.0.4.
3
Who is affected by CVE-2002-2358?
CVE-2002-2358 affects users using Opera versions 6.0 through 6.0.4 on any platform.
4
What kind of attacks can CVE-2002-2358 facilitate?
CVE-2002-2358 can facilitate cross-site scripting attacks allowing attackers to inject arbitrary web scripts or HTML.
5
When was CVE-2002-2358 disclosed?
CVE-2002-2358 was disclosed in 2002 and relates to vulnerabilities found in early versions of the Opera browser.