WebRTC in Opera 51.0.2830.55 Vulnerability: Private IP Address Disclosure in STUN Request

CVE-2018-6608 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.

Learn more about our Web App Pen Testing.