QwikSec

Security Database

CVE

CWE

Training

CVE-2013-1711

Published: Aug 7, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

oval:org.mitre.oval:def:18830

vdb-entry

signature

x_refsource_OVAL

https://bugzilla.mozilla.org/show_bug.cgi?id=843829

x_refsource_CONFIRM

http://www.mozilla.org/security/announce/2013/mfsa2013-70.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.