CVE-2011-4682
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which...
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
Exploit likelihood
What each source reports
NVD Score used
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
- Record
CVE-2011-4682- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
- Record
CVE-2011-4682- Updated
- 2026-11-02
EUVDEUVD-2011-4600 No score
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
- Record
EUVD-2011-4600- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qmmh-79gf-864m No score
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which...
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
- Record
GHSA-qmmh-79gf-864m- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4682 is a medium vulnerability (CVSS 6.4) in Opera Browser, published December 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. No source names a fixed version.