Opera » Opera Browser » 9.0 beta1 : Security Vulnerabilities, CVEs, Published In 2012 (Information Leak)

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.