CVE-2020-6158

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data.

• CWE-290

• https://security.opera.com/en/address-bar-spoofing-in-opera-mini-for-android-opera-security-advisories/

Published

Feb 21, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6151A memory corruption vulnerability exists in the TIFF handle_…9.8
• CVE-2020-6152A code execution vulnerability exists in the DICOM parse_dic…7.8
• CVE-2020-6153Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-6155A heap overflow vulnerability exists in the Pixar OpenUSD 20…7.8
• CVE-2020-6156A heap overflow vulnerability exists in Pixar OpenUSD 20.05 …7.8
• CVE-2020-6157Opera Touch for iOS before version 2.4.5 is vulnerable to an…4.3
• CVE-2020-6159URLs using “javascript:” have the protocol removed when past…6.1
• CVE-2020-6162An issue was discovered in Bftpd 5.3. Under certain circumst…9.1
• CVE-2020-6163The WikibaseMediaInfo extension 1.35 for MediaWiki allows XS…6.1
• CVE-2020-6164In SilverStripe through 4.5.0, a specific URL path configure…7.5
• CVE-2020-6165SilverStripe 4.5.0 allows attackers to read certain records …5.3
• CVE-2020-6166A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…5.4