PT-2025-7277 · Opera · Opera Mini For Android

Published 2025-02-21 · Updated 2025-02-21 · CVE-2020-6158

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Opera Mini for Android versions prior to 52.2

Description The issue allows a malicious page to trick the browser into showing an address of a different page. This may enable the malicious page to impersonate another page and trick a user into providing sensitive data.

Recommendations For Opera Mini for Android versions prior to 52.2, update to version 52.2 or later to resolve the issue. As a temporary workaround, consider being cautious when entering sensitive data on websites, especially if the address bar appears suspicious. Restrict access to untrusted websites to minimize the risk of exploitation.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2020-6158

Affected Products

Opera Mini For Android

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-6158 · Security Note
• https://t.me/cvenotify/112088 · Telegram Post
• https://twitter.com/CVEnew/status/1892931836566757887 · Twitter Post
• https://security.opera.com/en/address-bar-spoofing-in-opera-mini-for-android-opera-security-advisories · Note
• https://t.me/cvedetector/18662 · Telegram Post