CVE-2003-1561: Opera

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

Affected products

• Opera Opera: any version

Published 2003-12-31. Last modified 2026-06-16.