CVE-2008-4199: Opera Browser

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

Affected products

• Opera Opera Browser: up to and including 9.51; version 5.0 only; version 5.02 only; version 5.10 only; version 5.11 only; version 5.12 only; …

Published 2008-09-27. Last modified 2026-06-16.