TI-2020-05022 Aliases CVE-2020-6157 GHSA-827x-wg6m-4v6r

Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack.

LOW 21Published 2020-11-13 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data.

Why it matters now

EPSS 0.00721 54th percentileScored 2026-11-07

Fix Fixed Opera Touch for iOS: 2.4.5

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Opera Touch for iOS	before 2.4.5	2.4.5	Patch available	CNA

Opera Touch for iOS Vendor— Affected before 2.4.5 Fixed in 2.4.5 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:opera:opera_touch::::::iphone_os::*	before 2.4.5	Vulnerable	Opera

cpe:2.3:a:opera:opera_touch:*:*:*:*:*:iphone_os:*:* Versions before 2.4.5 Vulnerable ·Opera

Remediation

Fix · CNA Opera Touch for iOS Fixed in 2.4.5

Timeline

2026-10-02 Threatist record created from CVE-2020-6157
2026-10-03 Alias added: GHSA-827x-wg6m-4v6r

References

Advisory 1

https://security.opera.com/address-bar-spoofing-in-opera-touch-for-ios-opera-security-advisories/

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences