Home > Vulnerability Database > CVE-2013-0793

Mend.io Vulnerability Database

CVE-2013-0793

Date: April 3, 2013

Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing.

Severity Score

3.7

Related Resources (17)

Url: http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html

Url: http://www.ubuntu.com/usn/USN-1791-1

Url: http://www.debian.org/security/2013/dsa-2699

Url: https://access.redhat.com/security/cve/CVE-2013-0793

Url: http://www.mozilla.org/security/announce/2013/mfsa2013-38.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html

Url: http://rhn.redhat.com/errata/RHSA-2013-0697.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html

Url: http://www.securityfocus.com/bid/58837

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16928

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-0793

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=803870

Url: http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2013-0793

Url: http://rhn.redhat.com/errata/RHSA-2013-0696.html

Url: https://www.mend.io/vulnerability-database/CVE-2013-0793

Severity Score

3.7

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2013-0793

Date: April 3, 2013

Severity Score

Related Resources (17)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?