Beveiligingsadvies

CVE-2013-1711

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-08-07 01:00:00

Laatst bijgewerkt 2024-08-06 15:13:32

Toegewezen door mozilla

CVSS-score geen score

Status PUBLISHED

Beschrijving

The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.

← Alle CVE's bekijken Bekijk op cve.org ↗