VDB

CVE-2013-5612

CVE-2013-5612 PUBLISHED

Reported by mozilla · Published December 11, 2013

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.

Affected Products

VendorProductVersions
n/an/an/a
n/an/a*, n/a, n/a

Timeline

  • Dec 11, 2013 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Feb 10, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • May 26, 2023 EPSS Score
  • Jul 18, 2023 EPSS Score
  • Sep 9, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›