CVE-2003-1420: XSS
Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the browser's automatic redirection setting (do not leave automatic redirection disabled) in Opera 6.0 through 7.0 to prevent XSS injection via the HTTP Location header.
Opera web browser (6.0 through 7.0) automatic redirection = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1420?
CVE-2003-1420 has a medium severity rating of 4.3.
How do I fix CVE-2003-1420?
To fix CVE-2003-1420, update your Opera browser to a version higher than 7.0.
What type of vulnerability is CVE-2003-1420?
CVE-2003-1420 is a cross-site scripting (XSS) vulnerability.
What versions of Opera are affected by CVE-2003-1420?
CVE-2003-1420 affects Opera versions 6.0 through 7.0.
What impact does CVE-2003-1420 have on users?
CVE-2003-1420 allows remote attackers to inject arbitrary web scripts or HTML, potentially compromising user security.