Cross-Site Scripting Vulnerability in Opera Browser

CVE-2002-0270

What is CVE-2002-0270?

Opera can incorrectly index the MIME type of certain objects when the 'Determine action by MIME type' option is disabled. This could lead to scenarios where objects with a 'text/plain' MIME type are processed as HTML documents. This misconfiguration can be exploited by attackers to inject and execute arbitrary scripts in the context of unsuspecting users, potentially compromising their security and privacy through web applications that utilize the text/plain MIME type to thwart cross-site scripting attacks.

References