CVE-2002-0898: Opera Software Opera Web Browser

Medium severity, CVSS 5.0. EPSS: 6% chance of exploitation in the next 30 days.

Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.

Affected products

• Opera Software Opera Web Browser: version 6.0.1 only; version 6.0.2 only

Published 2002-10-04. Last modified 2026-06-16.