CVE-2011-2609

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 1, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-261010.0Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."CVE-2011-26114.3Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of serCVE-2011-26125.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26135.0The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-arrCVE-2011-26145.0The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving CVE-2011-26155.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content CVE-2011-26165.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown contenCVE-2011-26175.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors relatedCVE-2011-26185.0Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element orCVE-2011-26195.0Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the iCVE-2011-26205.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involviCVE-2011-26215.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related
CVE-2011-2609: Medium severity, CVSS 4.3 | Vulnix