CVE-2019-19788
First published: Wed Dec 18 2019(Updated: )
Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction from a third-party context.
Credit: security@opera.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opera Opera | <54.0.2669.49432 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-19788.
What is the severity level of CVE-2019-19788?
The severity level of CVE-2019-19788 is medium (5.5).
Which versions of Opera for Android are affected by this vulnerability?
Opera for Android versions up to 54.0.2669.49432 are affected by this vulnerability.
How does the vulnerability in Opera for Android occur?
The vulnerability in Opera for Android is a sandboxed cross-origin iframe bypass attack.
Is there a fix available for this vulnerability?
Yes, updating Opera for Android to version 54.0.2669.49432 or later will fix this vulnerability.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/opera
- canonical/opera opera