Every CVE Search/ Get API key

CVE-2009-3047

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain...

4.3 Medium

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Exploit likelihood

1.97%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Record
CVE-2009-3047
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Record
CVE-2009-3047
Updated
2026-11-02
EUVDEUVD-2009-3031 No score

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Record
EUVD-2009-3031
Updated
2026-11-03
GitHub AdvisoriesGHSA-4xwv-9c83-q58w No score

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain...

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Record
GHSA-4xwv-9c83-q58w
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3047 is a medium vulnerability (CVSS 4.3) in Opera Browser, published September 2, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.

References

MoveEnter Open