CVE-2009-2063

CVE-2009-2063 affects Opera browsers prior to version 9.25, allowing man-in-the-middle attackers to inject arbitrary web script into HTTPS sites. This occurs because Opera processes 3xx HTTP CONNECT responses before a successful SSL handshake, enabling an attacker to redirect to a malicious HTTPS site. The vulnerability has a CVSS score of 6.8, indicating a medium severity with network-based attacks and moderate complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.