CVE-2020-6158

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data.

Published 2025-02-21. Last modified 2026-06-17.