CVE-2013-1692

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of…

published June 26, 2013

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02011 · 80.7th percentile
Published
2013-06-26T01:00Z
EPSS history
Timeline
  • 26 JUN 01:00Z
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of…
    cvelistv5