CVE-2013-1714 vulnerability in Mozilla Products
Published on August 7, 2013
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Products Associated with CVE-2013-1714
Want to know whenever a new CVE is published for Mozilla products? stack.watch will email you.
Exploit Probability
EPSS
1.08%
Percentile
77.59%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.