CVE-2003-1561

Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

View graph Watch Export

CVSS v3.1

—

EPSS

0.97%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

CWE-200

source

Timeline

disclosure → media coverage

Dec 31, 2003

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026