Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1713
HistoryAug 07, 2013 - 1:55 a.m.

CVE-2013-1713

2013-08-0701:55:00
CWE-264
[email protected]
web.nvd.nist.gov
59
cve-2013-1713
mozilla firefox
thunderbird
seamonkey
same origin policy
xss
arbitrary add-ons
nvd

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.1%

JSON

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.

Related

prion 1
cvelist 1
mozilla 1
openvas 54
ubuntucve 1
nessus 33
debian 2
redhat 2
ubuntu 3
mageia 2
oraclelinux 2
veracode 5
centos 2
osv 2
suse 6
ibm 2
freebsd 1
securityvulns 1
gentoo 1
prion
prion
Cross site scripting
2013-08-07 01:55:00
cvelist
cvelist
CVE-2013-1713
2013-08-07 01:00:00
mozilla
mozilla
Wrong principal used for validating URI for some Javascript components — Mozilla
2013-08-06 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-72) - Linux
2021-11-11 00:00:00
Mageia: Security Advisory (MGASA-2013-0248)
2022-01-28 00:00:00
Oracle: Security Advisory (ELSA-2013-1142)
2015-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2013-1713
2013-08-06 00:00:00
nessus
nessus
Thunderbird ESR 17.x < 17.0.8 Multiple Vulnerabilities (Mac OS X)
2013-08-08 00:00:00
RHEL 5 / 6 : thunderbird (RHSA-2013:1142)
2013-08-08 00:00:00
Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130807)
2013-08-08 00:00:00
debian
debian
[SECURITY] [DSA 2746-1] icedove security update
2013-08-29 17:36:35
[SECURITY] [DSA 2735-1] iceweasel security update
2013-08-07 14:14:34
redhat
redhat
(RHSA-2013:1140) Critical: firefox security update
2013-08-07 00:00:00
(RHSA-2013:1142) Important: thunderbird security update
2013-08-07 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-08-07 00:00:00
Firefox vulnerabilities
2013-08-06 00:00:00
Ubufox and Unity Firefox Extension update
2013-08-06 00:00:00
mageia
mageia
Updated firefox and thunderbird packages fix security vulnerabilities
2013-08-12 17:54:58
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
oraclelinux
oraclelinux
thunderbird security update
2013-08-07 00:00:00
firefox security update
2013-08-07 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2019-05-02 04:48:19
Information Disclosure
2019-05-02 04:48:22
Cross Site Scripting (XSS)
2019-05-02 04:48:20
centos
centos
firefox, xulrunner security update
2013-08-07 11:33:09
thunderbird security update
2013-08-07 20:14:12
osv
osv
icedove - several
2013-08-29 00:00:00
iceweasel - several
2013-08-07 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-08-27 08:04:16
Security update for Mozilla Firefox (important)
2013-08-23 05:04:11
Security update for Mozilla Firefox (important)
2013-08-14 00:04:15
ibm
ibm
Security Bulletin: IBM Storwize V7000 Unified V1.4.2.1 Includes Fixes for Multiple Vendor Security Vulnerabilities.
2022-09-26 04:23:14
Security Bulletin: IBM Scale Out Network Attached Storage V1.4.2.1 Includes Fixes for Multiple Vendor Security Vulnerabilities.
2022-09-26 04:23:14
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-08-06 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-08-12 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.1%

JSON
Related for CVE-2013-1713
prion1cvelist1mozilla1openvas54ubuntucve1nessus33debian2redhat2ubuntu3mageia2oraclelinux2veracode5centos2osv2suse6ibm2freebsd1securityvulns1gentoo1