CVE-2013-1696

Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks…

published June 26, 2013

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01661 · 76.5th percentile
Published
2013-06-26T01:00Z
EPSS history
Timeline
  • 26 JUN 01:00Z
    Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks…
    cvelistv5