Lucene search

K
cvelistMozillaCVELIST:CVE-2013-1710
HistoryAug 07, 2013 - 1:00 a.m.

CVE-2013-1710

2013-08-0701:00:00
mozilla
www.cve.org
1

8.6 High

AI Score

Confidence

High

0.927 High

EPSS

Percentile

99.0%

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.