CVE-2005-1475: Opera Browser

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.

Affected products

• Opera Opera Browser: before 8.01 (fixed in 8.01)

Published 2005-06-16. Last modified 2026-06-16.