CVE-2013-1711

The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass…

published August 7, 2013

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02158 · 82.1th percentile
Published
2013-08-07T01:00Z
EPSS history
Timeline
  • 07 AUG 01:00Z
    The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass…
    cvelistv5