CVE-2001-0898: Opera Software Opera Web Browser

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.

Affected products

• Opera Software Opera Web Browser: up to and including 6.0

Published 2001-11-15. Last modified 2026-06-16.