File Upload Vulnerability in Opera Browser Versions 6.0.1 and 6.0.2

CVE-2002-0898

What is CVE-2002-0898?

Opera versions 6.0.1 and 6.0.2 are susceptible to a vulnerability that permits a remote web site to upload arbitrary files from a client's system without any prompt. This occurs through a compromised file input field, where the field's value includes a newline. As a result, attackers can potentially exploit this flaw to gain unauthorized access to sensitive files on the user's device, representing a significant security risk.

References